19480a04981aa1e3c4872b092130f793 | Triage

Sharing

General

Target

19480a04981aa1e3c4872b092130f793
Size

383KB
MD5

19480a04981aa1e3c4872b092130f793
SHA1

023b117017aea7b83d007f9f1e34b0fa50c64a82
SHA256

14cf30671a73eb5459aaae6bae83b1d2260a9e4b6050e0814c21d1391cd46713
SHA512

f8f249b2337541f26628d01f95c0ff7c1f1c1c4c6c9db520d1199620f3ffedab526651c25beac937560414eaaf3ad5d0bc4a1f77abedfb027ac2f60bc3df7544
SSDEEP

6144:3kDa7rq7qMzVOYgb6Y6veN4LOPX49QT/vBl4l8McOMOqFnDNg3inIVo42x:3k+7rqGMSbiveaLr9QT/w2McTpxgSIV4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19480a04981aa1e3c4872b092130f793

Files

19480a04981aa1e3c4872b092130f793
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

?Set_CrashUploadParams@@YAXHPB_W@Z
GetExternElapseTime
GetStartTickCount

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE