c19deccbb4c698b0765b07c1ef7d455a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c19deccbb4c698b0765b07c1ef7d455a
Size

12KB
MD5

c19deccbb4c698b0765b07c1ef7d455a
SHA1

a8defe7a00def2a929063164416157b4488249bd
SHA256

5f730857cfa95f8ded9f04d0ebebbcf6336a7f2ccedc2672dccd3500c0919b07
SHA512

3a7a5b95cde63e4a59cdb7fb1a1a9cb7361ad8f82fdcb3cf07b6a81c37444800d7cd774eed7c62eef820a5a5c2762942c849059d20e21253e4ef861c2edd885f
SSDEEP

48:6dHadQoFf2WFPmSIbvm8VjhvIocUe8VFCFXqiKg6ADj5BqR:PPFf2Wt2dRh93dVIF6ikA35QR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c19deccbb4c698b0765b07c1ef7d455a

Files

c19deccbb4c698b0765b07c1ef7d455a
.exe windows:4 windows x86 arch:x86

c494458029910d0ed6df63da0b05bbd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ