18c1b9091fa4edde468bd9a2897bdec0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18c1b9091fa4edde468bd9a2897bdec0
Size

729KB
MD5

18c1b9091fa4edde468bd9a2897bdec0
SHA1

eea87f3d60e96ec4344384dfe68e7b7ee1990dea
SHA256

e97cd1d848ca0187f4314c36a7c6979c9d0dda443bd5655a351d5a49ec35112b
SHA512

8e9469109b6b390f7265cda738c0bd0113bd50649a0dd5abce7fc209d5f10c8a6b27f2376329cfbff38b327c45cc42185a7de1f678debf3261e37b1cbf3f2013
SSDEEP

12288:WzxveAzCmVC4pVQDALYmiVkbTIKqzg/zWrwYDd3x4VcpMOafuwo+:ymeCmVC4pVwALYmieb8RzYgh3x4AHa2U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18c1b9091fa4edde468bd9a2897bdec0

Files

18c1b9091fa4edde468bd9a2897bdec0
.exe windows:4 windows x86 arch:x86

14b2a1e1ee054b100b047e8e6689e930

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
GetEnvironmentVariableA
MapViewOfFileEx
CreateFileMappingA
GetFileSize
GetLastError
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

Sections

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ