18330211a918616f6894948131c5b2c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18330211a918616f6894948131c5b2c1
Size

446KB
MD5

18330211a918616f6894948131c5b2c1
SHA1

38d090a3bf92e3c6147505ad948f89842f863ad2
SHA256

b20b86fb47b493e76aee438d432a4301a08f52a5c901301586a2f088116fac33
SHA512

6cd1f2a3ba1eab750b0ab4696a97549898ab39cdc870e69b4c0dc46db2648a43aedfcf57c1ab3583a2e80498d5021f0759e9f5165d7b55493f067731dfb12d5e
SSDEEP

12288:ZhQ7lM9czEgn+vHMM3hEFAetgTRJqQ2FTr:ClMWn+k+StgTR0br

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18330211a918616f6894948131c5b2c1

Files

18330211a918616f6894948131c5b2c1
.exe windows:4 windows x86 arch:x86

8ba4bae113b252391ef0613fbfabd5fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

mpr

WNetGetUserA

version

VerQueryValueA

gdi32

SaveDC

shell32

ShellExecuteA

wininet

InternetOpenA

winmm

waveInOpen

ws2_32

send

netapi32

Netbios

msvfw32

DrawDibDraw

avicap32

capCreateCaptureWindowA

urlmon

URLDownloadToFileA

Sections

.text
Size: 441KB - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 17B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE