19f29c99e19724fb2c110c581a08bdc0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19f29c99e19724fb2c110c581a08bdc0N.exe
Size

63KB
MD5

19f29c99e19724fb2c110c581a08bdc0
SHA1

dbfb65da636e57252c5010eceec53ab41fda1002
SHA256

0f8bf4ed0762b3c8daaf904a58c55d7d2e7a21b662f69d07cf6f8d3544df3618
SHA512

458b8cab34f1dc1ab19cd9c661d9d6c7b9da555d2da8c7242180211b007841dc3c7b322b940d6958c3651eae9b46ef662019e00eddb99da93ee4008fafb9f635
SSDEEP

1536:GqE73iTW1cJSVPSOQuqzKCS0CgBd4OcpwmN:G11cEVaruq8gBdqp7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19f29c99e19724fb2c110c581a08bdc0N.exe

Files

19f29c99e19724fb2c110c581a08bdc0N.exe
.exe windows:4 windows x86 arch:x86

13318c49ed5d3bceb330f113273f277f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetNumaProcessorMap
EnumSystemLanguageGroupsW
GlobalFindAtomW
SetConsoleCtrlHandler
GlobalWire
lstrlen
EnumSystemCodePagesA
SetConsoleTextAttribute
IsBadStringPtrW
UnlockFileEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE