18127168a0d92df8ba0b169398aa14da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18127168a0d92df8ba0b169398aa14da
Size

48KB
MD5

18127168a0d92df8ba0b169398aa14da
SHA1

a10d2327c815b056e55dd000c0b6ecb23f98d06a
SHA256

46bb80d1eaf9dceb77336b9bde996896bb8d8fd0a4d1530873cfe2efb0d9c7a3
SHA512

8565cc0b0f5f0afbedcccc6051db3dad10ccc56300f697844af050e4e740d5714d6a01e89147ab59be79cad3e1dd5bcbb5f48764a27deafbdc1452b18a075688
SSDEEP

768:h6AUeOQksHBm9Uz6+OhvGJOcfJZnjzB3yWBdHEFjEZ/gY7a2J7XPK8wJ44rOg0:D3HA9UW+O1GBZxpMjEZ/gY7a2J7xwa4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18127168a0d92df8ba0b169398aa14da

Files

18127168a0d92df8ba0b169398aa14da
.exe windows:5 windows x86 arch:x86

c9afb281d34a3183b7072f89ef24d936

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
RaiseException
Sleep
VirtualAlloc
VirtualFree

msvcrt

_XcptFilter
sscanf
swscanf

ole32

CLSIDFromString
CoCreateGuid
CoCreateInstance
CoGetObject
CoInitialize
CoTaskMemFree
CoUninitialize
StringFromCLSID
StringFromGUID2

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ