19d297644763773211bed0c7a2411090N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19d297644763773211bed0c7a2411090N.exe
Size

262KB
MD5

19d297644763773211bed0c7a2411090
SHA1

9a64bcb38cc2b1af26834af5d1649eab3b222939
SHA256

a19c51f18ad8c0e9c430d61c58e824403578315504a921b16df5d6582be0f38d
SHA512

d9f4d6fa8f79a2a3a7dc42bea12b7568562758da4c514ff0b4b1ffe620e1ce2d08ecbd3fcd5f884f232737c6057c1aafc0d8aa47a64c7f1d0b12205e54ba1f2b
SSDEEP

1536:6X0aX09rDVMFDwU5LenTpnDr5LenTpnDRSfubQa1Q5IkKZKZpfydCkfydC1zk:mlCKP1Q5IkKkf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19d297644763773211bed0c7a2411090N.exe

Files

19d297644763773211bed0c7a2411090N.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ