19804bebc5eca1512755c7324bb75f8e | Triage

Sharing

General

Target

19804bebc5eca1512755c7324bb75f8e
Size

42KB
MD5

19804bebc5eca1512755c7324bb75f8e
SHA1

e2bae8771fad08811ae951ab7147eaf032302cfb
SHA256

4fedcb68d2ebe01a6d8cb78f1aaf82df01612f1ec3c0c6586d2078fbf2ae0e9f
SHA512

27142c4bae878deaf4cb3870a8c1cd439315b3588fc35d575dfddb2d8ef5eed36f880278be9081a959755b66aa5ff6105226d585c9d685c6c6147b97331741fb
SSDEEP

768:EgylgZ+NX8W51hYE4tyuGjCNi+zD/EzCkC5HVYPCF:EgyWZw8WdxjCNDpHyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19804bebc5eca1512755c7324bb75f8e

Files

19804bebc5eca1512755c7324bb75f8e
.exe windows:5 windows x86 arch:x86

5d4c65057d53d17a227df82239e19e77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcessHeap
HeapAlloc
GetProcAddress
LoadLibraryA

user32

EndPaint
EndMenu
EndDialog
EndDeferWindowPos
EnumChildWindows
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
DialogBoxParamW
CreateDialogParamW
EnableWindow

advapi32

RegOpenKeyW
RegOpenKeyA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ