19d99126ebb48620f6717988c390d4f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19d99126ebb48620f6717988c390d4f9
Size

2.3MB
MD5

19d99126ebb48620f6717988c390d4f9
SHA1

6c91a09b6ff236ba59bdf6ed0e50e83121804da7
SHA256

c2ccd25e499603ddb2e6e061ab8b432ef4ccd5e284b29b4cca902b269c5581a0
SHA512

24dbc7a5a040d74a5ff6d58112266f435a3e461e7857e3f66236e27dc014f80e84fcd00e51e6d91bf92305c46414f96b083ad407ede93bae6d4a9dddfaab2a36
SSDEEP

24576:zs1V7uNRjr4CFTlcSe/HEp6uu2AXIR8RL:aV7uNRXNx4Ep67IR8x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19d99126ebb48620f6717988c390d4f9

Files

19d99126ebb48620f6717988c390d4f9
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ