19d50ec3f326ecfa48b353c16b02599e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19d50ec3f326ecfa48b353c16b02599e
Size

5KB
MD5

19d50ec3f326ecfa48b353c16b02599e
SHA1

94c037a77ba97ed2ea5f4e3bc8c505350f92f617
SHA256

b117a4d1f4e02e1ae1b39276c812662f4ced812cf5236ccdc9ba7c1dd4e784e1
SHA512

ece91031bb4c47cdc71d2ab7e0ee1d6328b712e289e85b67f99e8bb7644ffcffbf42a7e37f8f31345b1d97e9e3fa70560e9c988ccb3f5bca2cdee72a295dff3b
SSDEEP

48:Zvtibu//BFgElMNdkAtcm8ISpnalRd+BTpduvtBA8rzg:Z1pwElMNHtc/ICRBTpwFK8Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19d50ec3f326ecfa48b353c16b02599e

Files

19d50ec3f326ecfa48b353c16b02599e
.exe windows:1 windows x86 arch:x86

3c0e0aeae2b8bca34e34924f1429ea7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
ExitProcess
GetModuleFileNameA
GetProcAddress
GlobalAlloc
LoadLibraryA
VirtualAlloc
WriteFile
lstrlenA

user32

wsprintfA

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE