18ef85c503dabad1fb3cd823368c609a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18ef85c503dabad1fb3cd823368c609a
Size

22KB
MD5

18ef85c503dabad1fb3cd823368c609a
SHA1

7ec6da533cc797eee832cf9d9e221d6ee69266c4
SHA256

f0130d2727b8876fd1ee9c3d36da28013fdb5ffa036d5d0370ce504565aa71df
SHA512

b1c5965eca0936612713a774756af08b3c8f8826f8689efbf58a115f6b474d8aa3e7cac3cde9330f367e9c448600ae2362a3c70744484e1ed9d0de3d90118f6e
SSDEEP

384:r9wfXqZs4sIFRaxaQe6/iEgp5c7FnD8NrbTPyzqVyh8fzVv3pF1ezO:hwyZs5wvGipC7FDsrEq8sb1mO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18ef85c503dabad1fb3cd823368c609a

Files

18ef85c503dabad1fb3cd823368c609a
.exe windows:4 windows x86 arch:x86

c1e6b9b4c72d7e5d2d0b7c4900fa90c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetMessageA

advapi32

RegCloseKey

Sections

.text
Size: 16KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BtGEqtu0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ