18[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18.exe
Size

128KB
MD5

bb02472abbee69b057611e51acdcd9a2
SHA1

e449ceadba25294311007417b9d831b418525524
SHA256

24c838e77ae0cb80a0aa44d61a5c9994c4a37bd260d6a13339a4cff1d3a58163
SHA512

4a25f30b7ffaf0c09cfcbec2d6a2f5130950b5192ce8a5c5139300bd7b08ebeaacb8f189b6eb739bc2975f4acf01df1cf2518f9d7b2295812fe1fc5cc64c93d8
SSDEEP

3072:MNN99tt9jnD5/OvFxke5qYIjKWEVUMmixgyPE71IOy5o0:MNN99tt9jnD1wFGe5qYWtEVUMmiCypOz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18.exe

Files

18.exe
.exe windows x86

e3ec01e973a825f5cc07021d7c8e3c26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess
lstrcmpiA
RtlZeroMemory

user32

GetDlgItemTextA
LoadIconA
MessageBoxA
SendMessageA
SetDlgItemTextA
DialogBoxParamA
wsprintfA
EndDialog

comctl32

InitCommonControls

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ