18fb496430468ed064c23cab5af9dd21

General

Target

18fb496430468ed064c23cab5af9dd21
Size

118KB
MD5

18fb496430468ed064c23cab5af9dd21
SHA1

43c10b440a033d95a52ca3bdf15078058cc029c8
SHA256

cff6833b06ec8b6710d2e0284ed2f76a5b507b77233339057414407eb848b19a
SHA512

c532ea34ef16364b4ff0e6dfb4968a25a319ba84562d8d81a0b6881edeea4429331cf1a2635fa5ac6037f0ba1d3083970099e489097d2124990cd3b80272e00d
SSDEEP

1536:ONs2UxNbNQSITk5JC7dbTi5aNGcfUNSTIEkA4BKQpNNA4WHo/bpTpf6g1UReIK2B:nxNaSIaJC7A5ExHk/YHYFTH6LoS0S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18fb496430468ed064c23cab5af9dd21

Files

18fb496430468ed064c23cab5af9dd21
.exe windows:4 windows x86 arch:x86

750978b93dcbc1cf68320669627acfe4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegLoadKeyA
RegEnumKeyA
RegQueryValueW
RegEnumValueW
RegReplaceKeyW
RegCreateKeyExA
RegQueryInfoKeyA
RegDeleteKeyW
RegDeleteKeyA
RegQueryValueExA
RegQueryValueA
RegFlushKey
RegQueryValueExW
RegReplaceKeyA
RegLoadKeyW
RegEnumValueA

comctl32

InitCommonControls
ImageList_GetDragImage
ImageList_Destroy
ImageList_EndDrag
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Replace
ImageList_LoadImage
ImageList_Draw
ImageList_GetIcon
ImageList_Read
ImageList_LoadImageA
ImageList_Merge
ImageList_DrawEx
ImageList_GetImageCount
ImageList_DragLeave

user32

DialogBoxParamW
GetDC
LoadCursorA
CalcMenuBar
AppendMenuW
EndDialog
GetDlgItem
CloseWindow
DrawIcon
GetCursor
CopyRect
IsWindow
BlockInput
CreateIcon
GetMenu
DrawTextA
AlignRects

kernel32

CloseHandle
HeapFree
FreeLibrary
WideCharToMultiByte
lstrcatA
GlobalFree
GetModuleFileNameA
GetModuleHandleA
GetStdHandle
GetFileAttributesA
lstrcpyA
Sleep
GetCPInfo
lstrlenA
GetCommandLineA
GlobalAlloc
lstrcmpA
GetStringTypeW

Sections

.IWnYPN
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.HIvL
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.URaMU
Size: 5KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aeCN
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.XhWjc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

750978b93dcbc1cf68320669627acfe4

Headers

File Characteristics

Imports

advapi32

comctl32

user32

kernel32

Sections

.IWnYPN Size: 11KB - Virtual size: 10KB

.HIvL Size: 95KB - Virtual size: 95KB

.URaMU Size: 5KB - Virtual size: 113KB

.aeCN Size: - Virtual size: 1KB

.XhWjc Size: 2KB - Virtual size: 2KB

.IWnYPN
Size: 11KB - Virtual size: 10KB

.HIvL
Size: 95KB - Virtual size: 95KB

.URaMU
Size: 5KB - Virtual size: 113KB

.aeCN
Size: - Virtual size: 1KB

.XhWjc
Size: 2KB - Virtual size: 2KB