e19584353ee1703d2b4b6640c79fac0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e19584353ee1703d2b4b6640c79fac0b
Size

14KB
MD5

e19584353ee1703d2b4b6640c79fac0b
SHA1

e9dbf92cd3f125ced44b5aa36a22f35077bbdbdc
SHA256

ecd2fa120508adfe1626eb2e0e4685f19a1018cfa68ab9649975d7ef4210160e
SHA512

51ea2666fe191a19a5a3227ed95c2b8f3bf68dac3144fc59c78644e1066e442b590d1d60437a421ecf51d42fd7de6a469079c8631f41633b9b78528be5f277cf
SSDEEP

384:aSVXSlDHlc94whrYGFqG0F01goVFvuh3l1PHjy+bEDq:aS9S324whBIy1FbA3lhjy+bIq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e19584353ee1703d2b4b6640c79fac0b

Files

e19584353ee1703d2b4b6640c79fac0b
.exe windows:1 windows x86 arch:x86

2667e22a4669ffb6e59edb0e759113d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetModuleHandleW
GetThreadLocale
GetStringTypeW
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 450B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 923B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE