18e9955c0a46f4ac5a30078fe0347028 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18e9955c0a46f4ac5a30078fe0347028
Size

106KB
MD5

18e9955c0a46f4ac5a30078fe0347028
SHA1

fcd87d5193b3393b7de3fa59d025b2407f84444a
SHA256

e88069b4d0c692a4ac1270cf0869799656882f8c9667f1622563212eb180bce7
SHA512

1645f1665af17cbe116501a277d9dea710c9bf7460a36f6df33d260e2f828eda8ad55cb0b08311f35dc4f326d85a4e4565de2380db960937231a82dea361a0f5
SSDEEP

1536:YoEIlRESgTldtu2EZPkFb+Zwu57/3QtynUAp8cSbc3DFq9TabnhOqcknX/1:YodRExCypk/7Y2nPd3DKWzhOoX/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18e9955c0a46f4ac5a30078fe0347028

Files

18e9955c0a46f4ac5a30078fe0347028
.exe windows:5 windows x86 arch:x86

c1227d46f61b02c179fe14c4d25832e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
_except_handler3

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
ExitProcess
lstrcpyA
GetTempPathA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
lstrcatA
WriteFile
lstrcpynA
lstrlenA
lstrcmpA
CreateFileA

user32

GetFocus
wsprintfA
InflateRect
GetCursorPos
EqualRect
IsWindowVisible
ClientToScreen

shlwapi

SHGetValueA

gdi32

GetBkColor
GetBkMode

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE