219be0dd1e08b6e3a49b38196148d042 | Triage

Sharing

General

Target

219be0dd1e08b6e3a49b38196148d042
Size

699KB
MD5

219be0dd1e08b6e3a49b38196148d042
SHA1

0fba1d54223215c3cad0a660def802ef340aa149
SHA256

98bd7a2750cd832dc088ae775dad4d2c0514ed2900640a8fc06674d13bd13cfa
SHA512

3bdfc888e792bf0758d5f445e82a066a0b8f6ad788c8df8bce2e34e04cc6eb018c3dca8ce9f36cb03e55254aee2b9652305fa27a586339e8fc35163f0021ba71
SSDEEP

12288:7rQlNwnhT4HXuub2QDzXXvqIfE+dPw4wL9P/q4pvh299hI665:7Fnh8HXHb22nvR84uJy9hI6y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
219be0dd1e08b6e3a49b38196148d042

Files

219be0dd1e08b6e3a49b38196148d042
.exe windows:4 windows x86 arch:x86

1cb2a50a412cbff8aae5aaadc0a54ef8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
lstrlenA
GetFileSize
lstrcpyA
GetLastError
GetCommandLineA
GlobalFree
GetStartupInfoA
GetModuleHandleA
LocalFree
Sleep
CloseHandle
lstrcatA
GetVersionExA

msvcrt

wcschr
rand
_except_handler3
exit
_adjust_fdiv
__setusermatherr

user32

GetWindowRect
ScreenToClient
GetMessageA
EndDialog
GetSysColor
ShowWindow
MessageBoxA
BeginPaint
SetFocus
CreateWindowExA

gdi32

CreateSolidBrush
GetTextMetricsA
SetROP2
LineTo
GetTextColor

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 679KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ