19c615b9987f424482abd187bb3a577c | Triage

Sharing

General

Target

19c615b9987f424482abd187bb3a577c
Size

49KB
MD5

19c615b9987f424482abd187bb3a577c
SHA1

8b552d9e1b0dd540ce97b609a24d323c25c4bcb8
SHA256

394455b3dff2c6a7459187cc1942489a0e85ca8b7b59fc4ad216184a5f33a49d
SHA512

ac5e6db305e40147c12d3819aa69054cfec4a71ec14771d6e60f6a167cb9970b1b4c76451a37d195d351d4c3c4326f0a2dafa4b3e56e440e9718ba7a44d19593
SSDEEP

768:DLnsOYuCCe36Yh53898ZHIwhyp6WvbSrlzQdkEGA2DV3Lv+26jyoQ0Nz6xSkROT:DLsHuCb3i8Zdhodu9YkEz2V+2EHzT1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19c615b9987f424482abd187bb3a577c

Files

19c615b9987f424482abd187bb3a577c
.exe windows:5 windows x86 arch:x86

61c8d4a0d78de82c1d8a989f37f2f08c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptReleaseContext
RegQueryValueExA

kernel32

FindResourceW

shlwapi

PathCombineW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIW
StrStrW
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CharLowerBuffA
DispatchMessageA
DrawIcon
EndDialog
GetClipboardData
GetDlgItem
GetKeyboardState
LoadCursorA
SendMessageA
SetThreadDesktop

Sections

.vcf
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.klyh
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reb
Size: 6KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ