a19f1801af0bcd87e34bad2c6f14e163 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a19f1801af0bcd87e34bad2c6f14e163
Size

352KB
MD5

a19f1801af0bcd87e34bad2c6f14e163
SHA1

d801a3a05eb6450175e9483b89141a5f3feeb68d
SHA256

45bb143bcbb8ecc3146d9f88e6572738ae3c4c2776f66fe5628498a995d98c66
SHA512

54e23d1245d6c956293a2a57c3409e47678f7b9d1bdec8e48e67b88797e79a997dbbcd7124211e81609764fe481a13c3627ef511db8a52e6ab7f2b9342c005c1
SSDEEP

6144:YjFNu20NQFaL1L5atYkjbWWoMQ3NOqiiUlt7DMZHRqXARrClE7bT4s6:cFNFFavAbPoMQdgiUlqRqhqMv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a19f1801af0bcd87e34bad2c6f14e163

Files

a19f1801af0bcd87e34bad2c6f14e163
.exe windows:4 windows x86 arch:x86

61eb6da955e9513b33a758606707438a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
CloseHandle
GetComputerNameA
GetModuleHandleA
FindClose
GetSystemTime
CreateFileW
GetCommandLineW
ResetEvent
GlobalUnlock
UnmapViewOfFile
lstrcatA
CreateThread
GetCurrentDirectoryA
GetTickCount
Sleep
PulseEvent
HeapCreate
LocalFree
LoadLibraryW

user32

FillRect
CheckRadioButton
DrawEdge
IsWindow
GetKeyState
GetDlgItem
GetDC
DrawMenuBar
GetScrollBarInfo
CallWindowProcA
SetFocus
CreateWindowExA
DispatchMessageA

clbcatq

SetupOpen
DowngradeAPL
CheckMemoryGates
UpdateFromAppChange
SetSetupOpen

timedate.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ