19344dfa092f0a17c7bd5170590a84c0 | Triage

Sharing

General

Target

19344dfa092f0a17c7bd5170590a84c0
Size

244KB
MD5

19344dfa092f0a17c7bd5170590a84c0
SHA1

62519e49ff33a881ba96a16fe0282abff4c16ae3
SHA256

6f25c09f99ecfc322a813dacd9f8f3a6d0e009e1ce697b8fc95acaa6aed2da40
SHA512

57c14a46700c27a354b13c8bd2c6e5a040ceed8e3a7bd2db1076b38a56ca04082c150918fdef3d71367fd6ae9f7053afbf8291cda63f2515fd45adec71cf2143
SSDEEP

6144:haxpJOBaYYMyPgnpMtswfaXorpgBLSO/qsB54x9StrturF:haxHO8nJ2yOXcOZtrsB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19344dfa092f0a17c7bd5170590a84c0

Files

19344dfa092f0a17c7bd5170590a84c0
.exe windows:4 windows x86 arch:x86

74a4e07ecc45a9d034646c02e36e7f47

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
WaitForDebugEvent
GetDiskFreeSpaceExA
GetCPInfoExW
VirtualProtectEx
QueryDosDeviceW
GetCommTimeouts
GetProcessWorkingSetSize
GetDriveTypeW

user32

GetMenuContextHelpId
GetMenuItemInfoW
GetWindowContextHelpId
GetDialogBaseUnits
SwitchToThisWindow
DdeEnableCallback
OemToCharW
UnregisterHotKey
SetDoubleClickTime
ShowCaret
GetPropA

gdi32

FixBrushOrgEx
DeleteMetaFile
CreateEllipticRgnIndirect
GetCharABCWidthsFloatA
UpdateICMRegKeyA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE