19fe2cacb698a7e8271f4c4b4a06924361283c101c39abac8110eb7999f08068

General

Target

19fe2cacb698a7e8271f4c4b4a06924361283c101c39abac8110eb7999f08068
Size

368KB
MD5

a7d3fe2357cc8dacad8544bef36889a7
SHA1

dfb09dda28f158620658b149c9263621ac9a5598
SHA256

19fe2cacb698a7e8271f4c4b4a06924361283c101c39abac8110eb7999f08068
SHA512

26dc42a4525ffb4b79e73a56b2a0867171fca085a80b46e575b19afe5139b4e8934b67619935086e21bea1700691bc027c0e242884e6ac54de0bfdf7e58d8582
SSDEEP

1536:wwjcjdzGBoQvCHtzgT5Llm8imXDIorVMQWojiu:gjd8oNOlbimzIoGoj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19fe2cacb698a7e8271f4c4b4a06924361283c101c39abac8110eb7999f08068

Files

19fe2cacb698a7e8271f4c4b4a06924361283c101c39abac8110eb7999f08068
.exe windows:4 windows x86 arch:x86

bb801224abd8562f9ee8fb261b75e32a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
CloseHandle
ReadFile
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CreateFileW
InterlockedDecrement
InterlockedIncrement
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
LCMapStringA
LCMapStringW

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb801224abd8562f9ee8fb261b75e32a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 14KB

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 14KB

.shell
Size: 320KB - Virtual size: 320KB