518f5c6056d2f1768f203dbaff51c236 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

518f5c6056d2f1768f203dbaff51c236
Size

17KB
MD5

518f5c6056d2f1768f203dbaff51c236
SHA1

0496f9c4c5483ba71e2661f9f06db07ef618292f
SHA256

a44b6703c84c99ac361db693d3985a7f0b97061f0825575f4335baff33f3780e
SHA512

5ee821d5497d2e03421df0d5696a2cacf1341c48c5b41ad3434fdb48495bc6d195827782c1737fb13fe4e9045370b743c3f9190699bff56042b9a51b635d914e
SSDEEP

384:E43OUZr/h0NXBiFtuhWB1Y88FQMg9/gEHs:Pe0Lh0hBqttBOFQP/vs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
518f5c6056d2f1768f203dbaff51c236

Files

518f5c6056d2f1768f203dbaff51c236
.exe windows:5 windows x86 arch:x86

fa8560b3dd08ee001893e0edd10c4665

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
GetWindowsDirectoryA
lstrcatA
CreateFileA
VirtualAlloc
GetProcessHeap
TerminateProcess
IsDebuggerPresent

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

GetOpenFileNameW
FindTextW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
ChooseFontW

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ