19c573f14afca6ce0c540f417f75cee6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19c573f14afca6ce0c540f417f75cee6
Size

92KB
MD5

19c573f14afca6ce0c540f417f75cee6
SHA1

49c2c3bcedb7fe2c1e1cb217f3f6b9a034a1963c
SHA256

33b844c3e3b08136a01349dd1e0118d64086dbb5f653dde6d09ee63492cea59f
SHA512

9b5c1b64d022fdca895b01ab56db8601b0aff19844a138ca87f82356d6cd5c26ba761154e5c1badfd1213daf742b67ebda4e86351c3b8e895e90ee86620a9f92
SSDEEP

1536:GtVcns+Z21AtMOIwpgBumQraBz7lldv3qhs/MbXh1NT/ONYisA4oJ12J+jpwPv9d:GtV8tg1AtxIAozcQdYxTOqY4GEJd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19c573f14afca6ce0c540f417f75cee6

Files

19c573f14afca6ce0c540f417f75cee6
.exe windows:4 windows x86 arch:x86

f6fa93597a4536dfedd81a900d1e9576

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

msvcrt

_controlfp

kernel32

GetStartupInfoA
LoadLibraryA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

advapi32

RegSetValueExA

shell32

SHGetSpecialFolderPathA

ole32

CoCreateGuid

shlwapi

PathFileExistsA

Exports

Exports

?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z

Sections

.text
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bad0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.bad1
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ