193eb5950f586a2d919d439047e56044 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

193eb5950f586a2d919d439047e56044
Size

103KB
MD5

193eb5950f586a2d919d439047e56044
SHA1

026c59f7aa1166527d20336f864125ba189c5891
SHA256

94e8e6615a52f1df4b3cb498e907001ab8d1b8e923edbb6eb8ab7f8f940b1d66
SHA512

cfb8248fab55869504009c6880df26f0cefde06710706ed2cbeeed032c4029d7517e7828c054e25b9c8c1ca6e5059c4b52e2563d3049e5926feb650d2f0e0010
SSDEEP

3072:yBpJUAqu99jvDs+HsCArts+CBDBjb1FF:yrYu99vwCArgBD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
193eb5950f586a2d919d439047e56044

Files

193eb5950f586a2d919d439047e56044
.exe windows:4 windows x86 arch:x86

541b27a206b8db01f0ed492f975825ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

DefWindowProcA

Sections

.MPRESS1
Size: 87KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE