18d633b6a9e1cec0497b9da9439e4cb8

General

Target

18d633b6a9e1cec0497b9da9439e4cb8
Size

104KB
MD5

18d633b6a9e1cec0497b9da9439e4cb8
SHA1

2f64d2f9107cf534567877e869250c383e07c985
SHA256

94e230dbb7a249589a485855aa611ce9690434cbbbf9ca01f37cf28bbd5ffb82
SHA512

ee6ff5ce791087fa33bc1ee19dcc10e91587463bd24652c92a415a31fd3710f2d8d50263336e2d35d669005b7737ab58a9ad7c26b209aa45f7881124997f5f94
SSDEEP

1536:gaSL9u8amwoNpmLHPpLgZwp4VKQFnToIffQBHr8l:mWoNpmrTp4VNtTBffQBHAl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18d633b6a9e1cec0497b9da9439e4cb8

Files

18d633b6a9e1cec0497b9da9439e4cb8
.exe windows:4 windows x86 arch:x86

97bf02d4ea3aa70e7619853fc9c7313d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
WinExec
GetSystemDirectoryA
GetStringTypeA
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
GetStringTypeW

shell32

ShellExecuteA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97bf02d4ea3aa70e7619853fc9c7313d

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 64KB - Virtual size: 60KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 64KB - Virtual size: 60KB