194a0a67882a832bc8c37f255d381369 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

194a0a67882a832bc8c37f255d381369
Size

2.7MB
MD5

194a0a67882a832bc8c37f255d381369
SHA1

2d5c24f426aaa834e743abc98c7ae2e084278757
SHA256

cebf1ca12a37fb622926e459d8309a69d07de5074e6cd273b3eba1a2d5de3f52
SHA512

ccd8d8ae1002376723fde4992b607263094f532a80b4444088e7fb4a5d01cd1fcc8e885aad2599752b91dcdbb35f3bc62981357bc9eda23c96e09fdaf39f7597
SSDEEP

49152:Zz5ewgvRGD8AjL0OWvwROFCD0u0i/l2jtb3mu+ciFbwma:ZEwo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
194a0a67882a832bc8c37f255d381369

Files

194a0a67882a832bc8c37f255d381369
.exe windows:4 windows x86 arch:x86

65b6862e9898b195f4ef7a1685fd82dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

memset

comctl32

InitCommonControls

user32

MessageBoxA

shell32

ShellExecuteExA

ole32

CoInitialize

Sections

.
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE