18b98ab53f3684a9cb542173ffd85739 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18b98ab53f3684a9cb542173ffd85739
Size

39KB
MD5

18b98ab53f3684a9cb542173ffd85739
SHA1

3afe74b0340d0ab206fd0f675b04cce49af41f74
SHA256

e81df8ec0340270122a5960a8f4b18dc12932ebb5e2ee8eba2de0fb4685845e1
SHA512

1488d7dda69a14acce9cf0a80e6c97ee179d326c50f0e3a92f079bb88bd18965ce01205421ff4897f4329a6d16f56b348d644d62fd46271ec0ca455cab7d1880
SSDEEP

768:mVY4zzG+BnwOIZ6OvGRY9/Z/n7RWBsqEcyHZZ:mVJ7wOIZbGRY9/Z/guqEc4Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18b98ab53f3684a9cb542173ffd85739

Files

18b98ab53f3684a9cb542173ffd85739
.exe windows:4 windows x86 arch:x86

bb9859079e3dfbcf82d7c5ab0559d884

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
VirtualAlloc
LoadLibraryA
GetModuleHandleA

user32

TranslateMessage
DispatchMessageA
GetMessageA

oleaut32

VarOr

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ