18c6ba3099ec279fb8d8a1413d963c68 | Triage

Sharing

General

Target

18c6ba3099ec279fb8d8a1413d963c68
Size

132KB
MD5

18c6ba3099ec279fb8d8a1413d963c68
SHA1

0a53e854a4eaeaf9ba57d4c84b0ec0823b405c2b
SHA256

49e52d90b765796acb4225b3d74147afdfaa36a433b403471852765a76ab8492
SHA512

7a27dae160d3e49c50a77eb350f8c60c02dfdbca90144cc6c584dc5501909501d3d5c5d88ebbb1683bdab540d770fc979f670b99d8ced096d8fda2388ff0f242
SSDEEP

3072:cjPIpKVIzqLM5SBcDD+PnpdG/8IgdcUOB76873q33AhGRl+:oIpRqLMT+xc/ZgC1kyXhq+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18c6ba3099ec279fb8d8a1413d963c68

Files

18c6ba3099ec279fb8d8a1413d963c68
.exe windows:4 windows x86 arch:x86

669708a25972d919be11e97ea0522222

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

OleTranslateColor
OleCreatePictureIndirect
OleLoadPicture
OleIconToCursor

oledlg

ord10
ord4
ord1
ord9

sensapi

IsDestinationReachableA

sfc

SfcGetNextProtectedFile

sisbkup

SisRestoredCommonStoreFile
SisFreeAllocatedMemory
SisCSFilesToBackupForLink
SisRestoredLink

msvcrt

_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_strnicoll
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm

kernel32

GetStartupInfoA
GetModuleHandleA
GetWindowsDirectoryA
lstrcmpA
WriteConsoleW
InterlockedExchange
GetVersion
CreateEventA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 659KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ