0199940626fe2032eac786792dd45f80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0199940626fe2032eac786792dd45f80
Size

11KB
MD5

0199940626fe2032eac786792dd45f80
SHA1

060ef746cd836f9377fe3a987e9b6b7918dee64f
SHA256

972574af375100619cfd6c716d5e2f2adb52447deb73e1971f31414d60daf568
SHA512

64b49fb97252546fadc30816cfb3149707f7c1a2fc59279fe3e8f4d707016578dbe2fa5a2962d249e13f673becf2b46291fd70d4ec076280b1b6b524e3392e7c
SSDEEP

192:VEbOkR6ye+HTUkFlAoMTdcL2WAC9SGpYnxrOcnQRJSbmiSEqLL/zdBqdC56:VEbOCB3zJFPVxv/9RUqi5czjQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0199940626fe2032eac786792dd45f80

Files

0199940626fe2032eac786792dd45f80
.exe windows:1 windows x86 arch:x86

744136f68c4d90103ec55200ee6df25e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateHatchBrush
CreateICA
CreatePatternBrush
CreateRectRgnIndirect
DeleteObject

shell32

SHGetFileInfoA
SHGetInstanceExplorer
SHGetSpecialFolderPathA
StrStrIW

wininet

DeleteIE3Cache
DeleteUrlCacheContainerW
DetectAutoProxyUrl
FindCloseUrlCache

Sections

.text
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE