19fa5fa82a91432dc788e8eb7c9fcc27 | Triage

Sharing

General

Target

19fa5fa82a91432dc788e8eb7c9fcc27
Size

1.6MB
MD5

19fa5fa82a91432dc788e8eb7c9fcc27
SHA1

93367fc2f66b2221093e621311309860ee120938
SHA256

1c180ef58dff9e6aa56a6f5e68470c532f0fb8c0de2aec04b29fe6c8b974cab2
SHA512

ed78d1c2c1cff71dcc99e0deb9bee55b69c3190f9591e3ecb032ddbe0ffa5c4d298aacfd32feb4c9ad3213fca0ef874a4f24899bc13c2ea43870b8332b64d904
SSDEEP

49152:GXgIHDPZ0qquEB6Co3e2u6D7kfxf10zDD+D6raEHcdIU7Nfl:GwIjZghiePYKx80d/fl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19fa5fa82a91432dc788e8eb7c9fcc27

Files

19fa5fa82a91432dc788e8eb7c9fcc27
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE