419eb09725ce23f76c6edc34edad0690 | Triage

Sharing

General

Target

419eb09725ce23f76c6edc34edad0690
Size

20KB
MD5

419eb09725ce23f76c6edc34edad0690
SHA1

dfa099ce8da6323594c8377af73eb0a6d71793bf
SHA256

c4ca982bc7397b1139f4cbec633a9d36ebdeec144689dfacf075f5da704bb6ca
SHA512

466a0ae5e7e5f777d374b5f5b7dda0f9b5033ae3cc05d248d02b2df463778d4ac977a2c8bbf228e2f1987116a8172a53a4b5b9ab395014e2053280b6e9a6f8eb
SSDEEP

192:Wj9i0Sjfva4zqiDT3/mRZIhcvo0lbFnqCxDlpzxuJ85kWg+dL+d3EXrPK3BRwi/X:3razinOzNvo6sCJlpzxuz+drjCci/2k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
419eb09725ce23f76c6edc34edad0690

Files

419eb09725ce23f76c6edc34edad0690
.exe windows:4 windows x86 arch:x86

dde5513a71862ab68c0e4cc03883f533

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetModuleHandleA
ReadFile
SetFilePointer
GetModuleFileNameA
lstrcpyA
lstrcatA
LoadResource
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CopyFileA
GetCurrentThreadId
Sleep
GetLastError
CreateMutexA
LockResource
SizeofResource
SetFileAttributesA
CreateFileA
WriteFile
CloseHandle
GetTempPathA

user32

GetMessageA

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ