19e7b0dfcfcbc4bcbb1265a8b2ab12e2af5c25c6af592c151b685b3bf6e2909e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19e7b0dfcfcbc4bcbb1265a8b2ab12e2af5c25c6af592c151b685b3bf6e2909e
Size

519KB
MD5

81a8e22c3eefbd819dafe7f4cfbad7ce
SHA1

4f3a112665d9ca66f80fac36d2be3ea82fc11350
SHA256

19e7b0dfcfcbc4bcbb1265a8b2ab12e2af5c25c6af592c151b685b3bf6e2909e
SHA512

c506ad457253c39f4e351775402d75dc4835e9239f320273c2ca6b5401bbfe9d95e9cc03c3d0a459b3cd1246472a89c1256a08631ac3f48ea6748a511ba50c5d
SSDEEP

12288:NQh0gWQjxQh0gUEu+Iz5wh0H2wPpZSPP1D0SAS8J+cbOc8u0e/oOG1:DgvgwChfwPpAZ8jO4/ob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19e7b0dfcfcbc4bcbb1265a8b2ab12e2af5c25c6af592c151b685b3bf6e2909e

Files

19e7b0dfcfcbc4bcbb1265a8b2ab12e2af5c25c6af592c151b685b3bf6e2909e
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 468KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ