919d90c8a3423dcba517601bb4b44722bad44a9ae236bd5f891714eff704851e | Triage

Sharing

General

Target

919d90c8a3423dcba517601bb4b44722bad44a9ae236bd5f891714eff704851e
Size

53KB
MD5

a87d1c3e46dc7728928302cc26dff744
SHA1

1a86fb01458b5d9be2915518af6d06887edced67
SHA256

919d90c8a3423dcba517601bb4b44722bad44a9ae236bd5f891714eff704851e
SHA512

3352744ee8cfa5d2e2c95e584ee3eb7f430416f0fc6101de1f5aedbba9da77d2ee57406ce0deca140d831aeae0d624bebfcde12901a40b273c71ba2d827c0e48
SSDEEP

768:2PitRNEGtXXnZ/JudBDtcUtdVCxVOS3fNGq5xgBt3u:RF3wDtkx3P5xse

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
919d90c8a3423dcba517601bb4b44722bad44a9ae236bd5f891714eff704851e

Files

919d90c8a3423dcba517601bb4b44722bad44a9ae236bd5f891714eff704851e
.exe windows:5 windows x86 arch:x86

32ea2988a92c31a9efd5b936dc243a44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

GetColorDirectoryW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ