190c30651145f1f7799da7b957af1b93 | Triage

Sharing

General

Target

190c30651145f1f7799da7b957af1b93
Size

48KB
MD5

190c30651145f1f7799da7b957af1b93
SHA1

1c4a7dd652d1cdd05aed22138bd392e7ebbc67cb
SHA256

84bc24ac260eefef876d0dd8954bf34a5c9ea9e5d08c07cd0225d0c8f1e1e98b
SHA512

73666d25a0545ad43ab7b7bea8aee65c04ad534e01954cf1e953af37476c3e0258525acfbfd5692f65c4513c6031d1dec97e272b71cc32071c86ca113de63b54
SSDEEP

1536:wmym3C8wOb5MUYlcka2BPPafWLp6m77ZIGS:hH3HwOma2IIIm7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
190c30651145f1f7799da7b957af1b93

Files

190c30651145f1f7799da7b957af1b93
.exe windows:5 windows x86 arch:x86

e7592a67aba21b9ac478ec654ea5e66a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrW
wnsprintfW
wnsprintfA
PathFindFileNameW
wvnsprintfW
PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyA
wvnsprintfA
StrCmpNIA
PathMatchSpecW
StrCmpNIW
PathCombineW

advapi32

DuplicateTokenEx
CryptReleaseContext
RegQueryValueExA
RegCloseKey
CryptCreateHash
RegDeleteValueA
CryptGetHashParam

Sections

.griv
Size: 39KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exsx
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nmtkd
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ