20219ab609015dda00711e669b28a69a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20219ab609015dda00711e669b28a69a
Size

15KB
MD5

20219ab609015dda00711e669b28a69a
SHA1

ae474c373f4efdd11333ae8214548fd0a22d0746
SHA256

818b9e0183b4f1120a80a54befe3511e7eb8139d541df0b9be04776115183ce9
SHA512

57be997dd0af2d38d1f587aa297e69951bf21f189276d0357469088fc78a1b072005adf4c27c93092320cc0fec22b1d1f5e1e114cd74b7d9ecaba5d0f08c5afc
SSDEEP

384:iOSyYGeR/d1GSVA18WpR6C7b3+5joFbkR3YVsfTpxGCAeuOdj/j:OkeDnVG82R6wZFZVMT5zj/j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20219ab609015dda00711e669b28a69a

Files

20219ab609015dda00711e669b28a69a
.exe windows:1 windows x86 arch:x86

57ec5f454fdf9e4bd54ba0600ea0a935

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetAclInformation
GetSecurityInfo
I_ScSetServiceBitsW
InitializeSid
LsaClearAuditLog

user32

CreateIconFromResourceEx
CreateCaret
DdeGetData
DdeNameService
DefDlgProcW

Sections

.text
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE