19c602ee49b4cd29e26033c3d43871298da5820c8db5b5877efcf2e08f786e95N | Triage

Sharing

General

Target

19c602ee49b4cd29e26033c3d43871298da5820c8db5b5877efcf2e08f786e95N
Size

120KB
MD5

2efe64c34738df82be63cf7b87ec0450
SHA1

e4d42ffaa92859f701fb0e676d51f62c50ba2070
SHA256

19c602ee49b4cd29e26033c3d43871298da5820c8db5b5877efcf2e08f786e95
SHA512

cb62b4e4c6d84ce72d10dae507f3ee3a3ad032d19637f1300f94368cc3968aede7797ce4400e0b4fc66fa85d93c131303b31609960c8d1df13670506b31d0cee
SSDEEP

1536:DeiTzMEjDPkNCqhWrNcPhnnCka4g5rD1fHwYaAvjAp4DN0prpkGo3WJCm8xD5VSE:KHEyw+n012AvFwK3WkvVSnocM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19c602ee49b4cd29e26033c3d43871298da5820c8db5b5877efcf2e08f786e95N

Files

19c602ee49b4cd29e26033c3d43871298da5820c8db5b5877efcf2e08f786e95N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ