2019ac207da7af37ac4c05e52fcbd67f842c5efac53c54c293c9f5101d2cda2e

General

Target

2019ac207da7af37ac4c05e52fcbd67f842c5efac53c54c293c9f5101d2cda2e
Size

1000KB
MD5

4654a7a29e829eab05f994505ab0e433
SHA1

f1781e9d485023bd2cd396e4e5eb50d8b86fc60f
SHA256

2019ac207da7af37ac4c05e52fcbd67f842c5efac53c54c293c9f5101d2cda2e
SHA512

7b0a0f1498d072744e39013c36e464857e01e0bc2b2cab067c0f47390dd65b98d66995aeeb1e839d09b3401e258d032f2c1dea13e25fa5032f564c36f537f22f
SSDEEP

12288:zRKAgAZ9MHFnOm3QXoqYgAMjwMCi2OKJVp/SMfz4KBxz00f/5r2BhluQj7IL83cb:8HFOxoq7707Z7BfzfBl0g2BLxvI4cLf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2019ac207da7af37ac4c05e52fcbd67f842c5efac53c54c293c9f5101d2cda2e

Files

2019ac207da7af37ac4c05e52fcbd67f842c5efac53c54c293c9f5101d2cda2e
.exe windows:5 windows x86 arch:x86

ce40e21b63b483c5ce91c6f4d304898b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
SetLastError
LocalUnlock
IsBadHugeWritePtr
RtlUnwind
RaiseException
DecodePointer
EncodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetProcAddress
GetModuleHandleW
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetLastError
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapFree
HeapAlloc
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
GetStringTypeW
LCMapStringW
CloseHandle
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileW

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

ce40e21b63b483c5ce91c6f4d304898b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 130KB - Virtual size: 130KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 496B

.text
Size: 130KB - Virtual size: 130KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 496B