19e9130a5ae26799f02b9e470075a18688f671d941dfc365f04e66e0ed3d4be2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19e9130a5ae26799f02b9e470075a18688f671d941dfc365f04e66e0ed3d4be2
Size

884KB
MD5

ade41b05b3a6ee64bf3407059aa1a2ba
SHA1

606866f876ff1ada6618d58ce11c76329c180a98
SHA256

19e9130a5ae26799f02b9e470075a18688f671d941dfc365f04e66e0ed3d4be2
SHA512

e2c3253bf4027b260284a94959949d6a387f86346887599a6a5783357f93cddf6adf7315d23b5d6a130c46478ce1d476445039a84ef39e9776f63de915c6cb1d
SSDEEP

12288:s9deSlySlk6l5Z5sy/y/y/y/y/yS5sy5yS5Z5Z5sy/y/y/y/y/yS5Z5Z5H:JSlySl3aaaaa2geaaaaak

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19e9130a5ae26799f02b9e470075a18688f671d941dfc365f04e66e0ed3d4be2

Files

19e9130a5ae26799f02b9e470075a18688f671d941dfc365f04e66e0ed3d4be2
.exe windows:1 windows x86 arch:x86

8fb490aacc7f5ac566dff4d7a2b7cb7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
GetCurrentProcessId
GetTickCount
TerminateProcess

user32

EnumWindowStationsA
FindWindowA
GetClassInfoExA

gdi32

GetTextFaceA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ