19e92323d1ec22a47203d09f61914691 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19e92323d1ec22a47203d09f61914691
Size

208KB
MD5

19e92323d1ec22a47203d09f61914691
SHA1

6cb674dbe705756bb1e6bd705a754b1e7a4dfe05
SHA256

743cc0fd02aae6c115447320dfe52c7b0ffb94a2a5ac26c1ee211de33302177e
SHA512

9aa76cb180a715fe6689a9bb138e2088e2374c8f90958951d720039db37ee7bc9a2f3548b6f7c0e0369f0868d4131d5bb57e12e088dff9854f4b8d555e1be43b
SSDEEP

3072:/a5aXBlgZTs0ZV2jx0FzNT46uY8fUCHpS/giuw:1qZTxQjkN8fUqS4f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19e92323d1ec22a47203d09f61914691

Files

19e92323d1ec22a47203d09f61914691
.exe windows:4 windows x86 arch:x86

12fae67bf6ab1635e1f6168bc634eceb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
LoadLibraryA
GetCommandLineA
VirtualAllocEx
FindFirstFileA
ExitProcess
FormatMessageA

user32

RemovePropA
GetMenu
GetActiveWindow
RemoveMenu
ReleaseDC
CreatePopupMenu
GetCapture
ReleaseCapture

advapi32

RegDeleteValueA
RegCreateKeyA
RegEnumKeyA
GetUserNameA

msvcrt

time
_acmdln
wcstol
exit
wcscspn
tolower
rand
swprintf
srand
malloc
clock
wcschr
atol
wcsncmp

Exports

Exports

_QzVYyZBy@12
FwkMaoG
XebrE
_mUDlk6dvrVT
_9oQOq5Oq@24
WncLG@20
vNFwszwjbZ2Rb@16
_naTyeucofYK

Sections

CODE
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fodata
Size: 512B - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.podata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ