19321e8296c1a46ee9f5215d61d940ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19321e8296c1a46ee9f5215d61d940ae
Size

2KB
MD5

19321e8296c1a46ee9f5215d61d940ae
SHA1

27fc8d17c200a5de6a4c4c0d8aac6fa40bff092b
SHA256

5072ba4657f902c36fb3c9ad72750bbe55f129bc698f70a7ffa67bcdea35b624
SHA512

762a547c7db14b9d97cbe56596e3160255f1d790723bccd1a32be2bccafb26e721707fcb6628c77d9fad835caac10393982b598c7e08aa8b722fae521f1f7989

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19321e8296c1a46ee9f5215d61d940ae

Files

19321e8296c1a46ee9f5215d61d940ae
.exe windows:4 windows x86 arch:x86

434c1915d1b9264128b011d3a449ce1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
ExitProcess
GetCommandLineA
GetCurrentThread
GetEnvironmentVariableA
GetProcAddress
GetTickCount
LoadLibraryA
OpenFile
OpenMutexA
SetThreadPriority
Sleep
WinExec
WriteFile

wsock32

send
socket
recv
gethostbyname
connect

user32

wsprintfA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE