18e0cf7d5bb174b7043ebb629d39d178 | Triage

Sharing

General

Target

18e0cf7d5bb174b7043ebb629d39d178
Size

203KB
MD5

18e0cf7d5bb174b7043ebb629d39d178
SHA1

3ad42c586a812ba74d3b60a376b31d62a4824a1a
SHA256

e4466bf99cf3c85c008450e5e26925526cac037873103dbb91f50e2ff9708ad5
SHA512

04055cc54d4f578176ff9c4ef96ab3d46937d54a95c6e0805474b218f4d46197e6a4ed1b3b3f754cc5b8b8243c31216797455ef47a192804dffd57ba23b79f90
SSDEEP

3072:LNZexKuf6VdIp0vw7wTWapG2gyY8SdZ0Rxs92cRwyO+objD7Tu:DwtWxo7WWcjnR6FRuTT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18e0cf7d5bb174b7043ebb629d39d178

Files

18e0cf7d5bb174b7043ebb629d39d178
.exe windows:4 windows x86 arch:x86

5c194d81fae9fce438b513b8fabb37e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetStartupInfoA

msvcrt

__p__fmode
__set_app_type
exit
log
_acmdln
__getmainargs
_except_handler3
__setusermatherr
_initterm
__p__commode
_adjust_fdiv
_XcptFilter

user32

FindWindowA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ