19de26709ba4757d531c55044f1e096a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19de26709ba4757d531c55044f1e096a
Size

10KB
MD5

19de26709ba4757d531c55044f1e096a
SHA1

7886b739654dd86fdecaa28900dda9372d1cf2e7
SHA256

76e9875c10d64e91774d1d8a2cf4dbec375227e20e631c9c122cfe792b82d8f7
SHA512

3f79392c4d2f807410a7d14002cc92e36f9d95c96e2e740e6ffcfae89667a08b5412025f15e3e7a1523e2b77cfa8659ea8294ae31942ff7bd13533e1e3b30131
SSDEEP

96:iBQFRQ9hPiQnLG9RWaQJNaInZUVDlMp33Tjdr2g4qx1WhqilJOQGJ6UgxzCyJ:iWRQKOk+rZUVDlMH5dkOXq9h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19de26709ba4757d531c55044f1e096a

Files

19de26709ba4757d531c55044f1e096a
.exe windows:4 windows x86 arch:x86

0937741ef5bb6775f0ee209bdfab07a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
CreateDirectoryA
GetModuleHandleA
ExitProcess

user32

PostQuitMessage
LoadIconA
MessageBoxA
DefDlgProcA
EnableWindow
GetWindowTextA
RegisterClassA
CreateDialogParamA
SetWindowTextA
GetDlgItem
SetDlgItemTextA
SendMessageA
GetWindowLongA
SetWindowLongA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
DestroyWindow

advapi32

RegCloseKey
RegFlushKey
RegSetValueExA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegCreateKeyExA
RegQueryValueExA

msvcrt

__mb_cur_max
strncpy
strncat
_pctype
_isctype

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ