18[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18.exe
Size

128KB
MD5

cd75f7e1062bb136d18827967ee23fe6
SHA1

43d610c2b8b3ed30d16fc62dcfebc2ce7058282e
SHA256

b7e2c12e4d925042ea7790612854b32b97c033ed5cca0fac4ba7b8bda5c3bc00
SHA512

fd39c568c0b287649ec0e8ed7e6f49ba2968662226e8aa1b870cdb2e1dab7ac942d830404c17c9d240886b960e9b0fb0042d7f2008ea99bdbc0b1c184fb3447a
SSDEEP

3072:ENN99tt9jnD5/OvFxke5qYIjKWEVUMmixgyPE71IOy5o0:ENN99tt9jnD1wFGe5qYWtEVUMmiCypOz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18.exe

Files

18.exe
.exe windows x86

e3ec01e973a825f5cc07021d7c8e3c26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess
lstrcmpiA
RtlZeroMemory

user32

GetDlgItemTextA
LoadIconA
MessageBoxA
SendMessageA
SetDlgItemTextA
DialogBoxParamA
wsprintfA
EndDialog

comctl32

InitCommonControls

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ