18a698d997b52e125008a506bbb2555d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18a698d997b52e125008a506bbb2555d
Size

235KB
MD5

18a698d997b52e125008a506bbb2555d
SHA1

4d7cb4cfe1ea72791e7e3494f114136499c0bc4d
SHA256

e280e187c70e55548f6621890386f756220cdf88744494c322e9f5ec49fb620c
SHA512

009b4b1020cff26a17d060e1151c075e17149fda0106f8bdaf75a6f922082621708eb8322c3daff73290bb1065a3f7096e2832f423f08451f0d8b2098437afe7
SSDEEP

6144:mvKjIsnMuvQhYipmXjJ8q4PnB4jfGonQbDNMhYFD0T7U5e:bEsCqUQKq4/uQbxgYEIc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18a698d997b52e125008a506bbb2555d

Files

18a698d997b52e125008a506bbb2555d
.exe windows:4 windows x86 arch:x86

94dc696bb9ec945b6003346e9c9018fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
RtlUnwind
CloseHandle
HeapCreate
HeapAlloc

user32

CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA

advapi32

RegSetValueA
RegCreateKeyA
RegDeleteKeyA
RegQueryValueA

ole32

CoInitializeEx
CoMarshalInterface
CoUninitialize

Sections

.MPRESS1
Size: 91KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE