18d46790a7f7569226dc839973f7bced | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18d46790a7f7569226dc839973f7bced
Size

267KB
MD5

18d46790a7f7569226dc839973f7bced
SHA1

67fa2eef98f1ca1cfd24ad35caad8085bdee04ca
SHA256

d0099a2e473cc127b6ef033e43b367152cc635af572d0ca86fb85b47d3b9bdf2
SHA512

684c61907fd393707877b4e93d7f705f61ecc5ace9611118b259f476f6f183383972b8c919805447c1c5f7549da40f024b01f775fdb892fe449958e7d8be178f
SSDEEP

6144:3uwQb2dgkqz1g7BMWsUj6k0Wm59MXzC+WqbVrjAW:3xQB27BMoWktLjAW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18d46790a7f7569226dc839973f7bced

Files

18d46790a7f7569226dc839973f7bced
.dll windows:4 windows x86 arch:x86

f0eb31e531b2245494fade300892683d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetCursor
OemToCharA
LoadAcceleratorsA
IsCharUpperA
EndPaint
EndDialog
EnableMenuItem
DrawStateA
CreatePopupMenu
CreateDesktopW
ActivateKeyboardLayout

kernel32

LoadResource
TlsFree
SleepEx
Sleep
SetEndOfFile
RtlUnwind
RaiseException
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
CompareStringA
EnterCriticalSection
EnumResourceLanguagesA
GetFileSize
GetLocalTime
GetStartupInfoA
GetSystemTime
GetSystemTimeAsFileTime
GetTimeFormatA
GetVersion
OpenFile
LocalAlloc
VirtualAlloc

oleaut32

OleLoadPicturePath
RevokeActiveObject
SafeArrayAllocData
SafeArrayAllocDescriptor
VarBstrCmp
ClearCustData

Sections

.text
Size: 18KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ