19f31158389c7fa5e4757451a7be9754 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19f31158389c7fa5e4757451a7be9754
Size

32KB
MD5

19f31158389c7fa5e4757451a7be9754
SHA1

5c5dba9b7cfbe6b0d266b04b0ce0dd8910090900
SHA256

7719e451260080acce7b4fb974356f0b3974b1bbed40b671ffe793b669331840
SHA512

ee5de6d6f8b9efb0fdbdda0104dce694005cf30bf14ecdfdef2da3f2517ca6bfa168143dd03f75d57de0d7cf7c291e1ce6b21855d07831aa3524c39c14202354
SSDEEP

48:6v+JcyE2Qb3ltQvjdRQJrk2tUm9O67oFdglH1CFaX6qxfffff7uRQBYPxQMvcKOM:ZlsM7PQJnHMGoFCIM6qx4WcjMch2Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19f31158389c7fa5e4757451a7be9754

Files

19f31158389c7fa5e4757451a7be9754
.exe windows:4 windows x86 arch:x86

85773a17eac8d4a521b00d2cca9b9ac3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ