19c226cbc86b3c74cfaeff5ed649ae6f4c0346e889ebcb8119f6ae61fe5a65d9

General

Target

19c226cbc86b3c74cfaeff5ed649ae6f4c0346e889ebcb8119f6ae61fe5a65d9
Size

424KB
MD5

5f9fcc0a479547594816de5461e07632
SHA1

01f93ff4ca41a5670b98cc3e22e2d5e0137853dd
SHA256

19c226cbc86b3c74cfaeff5ed649ae6f4c0346e889ebcb8119f6ae61fe5a65d9
SHA512

8491b4e7c6d18745fc416c83bffac9996c304dd45795d8665548e13532cd2dd91371c4373a398624211bcd3e5a7e86143e13a82cc3b5843a9b3978c9579e7f12
SSDEEP

1536:XQYJ08n/gXo2oq3Megbm+OvD5a2IznYaHju:XQYyY8ocMlOr5a2Issa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19c226cbc86b3c74cfaeff5ed649ae6f4c0346e889ebcb8119f6ae61fe5a65d9

Files

19c226cbc86b3c74cfaeff5ed649ae6f4c0346e889ebcb8119f6ae61fe5a65d9
.exe windows:4 windows x86 arch:x86

6e4b5131accc19c13852d3bfa104dadf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
WriteFile
LoadLibraryExW
GetProcAddress
GetModuleHandleW
CreateEventW
GetModuleHandleA
SetEvent
VirtualAlloc
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
GetCurrentThread
Sleep
LCMapStringA
MultiByteToWideChar
SetFilePointer
FlushFileBuffers
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
CloseHandle

user32

SendMessageW
ReleaseDC
LoadCursorA

gdi32

SelectObject

winmm

auxSetVolume

ws2_32

select

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e4b5131accc19c13852d3bfa104dadf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winmm

ws2_32

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 28KB - Virtual size: 32KB

.rsrc Size: 44KB - Virtual size: 42KB

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 28KB - Virtual size: 32KB

.rsrc
Size: 44KB - Virtual size: 42KB

.shell
Size: 320KB - Virtual size: 320KB