19b65f7662543f8b5ed52ec52d14decf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19b65f7662543f8b5ed52ec52d14decf
Size

303KB
MD5

19b65f7662543f8b5ed52ec52d14decf
SHA1

1b4bd22240ae372c05c73cb4cb5d41779ee710c2
SHA256

9a326cf0de84af87bd25ffcb1674eed2403169160bc846ba4154779b4bb1fb1b
SHA512

9cd11d8b192a2927706562e6cb8c60dcb2cb58540f9964266d21d07427da6a7f51322f3cf9d07fe13e77067802ffdea64b27db3eec9673e0a9eb6b6b95eb00d5
SSDEEP

6144:UX2qUkNOMqJcraO4yiV+UmDVoz48igZ3U2GTXTvCTi4KCLgZkl6IXh:MhsMZSyiHmDVoUlgZ3F+l4KCLgZkl5X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19b65f7662543f8b5ed52ec52d14decf

Files

19b65f7662543f8b5ed52ec52d14decf
.exe windows:4 windows x86 arch:x86

6b7f3cf26a3c9cbb4ad8b0f3e4c9c874

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualAlloc
GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
ResetEvent
GetFileSize
CreateFileA
PulseEvent
GetCurrentThreadId
LocalReAlloc
Sleep
VirtualFree
VirtualLock

user32

MoveWindow
SendMessageA
GetSysColorBrush

netapi32

NetDfsRemoveFtRootForced

avifil32

AVISaveOptionsFree

msvfw32

DrawDibStart

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ