00519738b64489e5c4c2b61d9901ac48dbfb2c9e6bd992d085f99ee2b610d416 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00519738b64489e5c4c2b61d9901ac48dbfb2c9e6bd992d085f99ee2b610d416
Size

32KB
MD5

98fbccc91247eab719c846212fad0c84
SHA1

31d97e42bd27be6f3186ad246aff24dd0ceec968
SHA256

00519738b64489e5c4c2b61d9901ac48dbfb2c9e6bd992d085f99ee2b610d416
SHA512

2916b5c38405831948a1b44548aefc5cff3fa6a369b17aef4d1e82b9d59289c1b07b0ef16d11d7958cc2897f2b736ee29e440380dcb893102778153c90f676ed
SSDEEP

384:Hwz9d7SihU8MSmmlzIDyyr/rh6ozp331wejEr9t/OnCIwKAgN:IbhMPyKjh6ozZ1w2G9t/+A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00519738b64489e5c4c2b61d9901ac48dbfb2c9e6bd992d085f99ee2b610d416

Files

00519738b64489e5c4c2b61d9901ac48dbfb2c9e6bd992d085f99ee2b610d416
.exe windows:4 windows x86 arch:x86

6e387d9987e67c1eb8196002e4cff8a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
CreateFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE