18427e4ae2bb59a90172afdd9c989403 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18427e4ae2bb59a90172afdd9c989403
Size

17KB
MD5

18427e4ae2bb59a90172afdd9c989403
SHA1

416d5db6c60fa16b11f4dec149b403b3f71e3ab2
SHA256

3dfec023e4296bf9a9edfec6c6eacc60964e3921ee1a68ddf2158e254f33edfc
SHA512

985a73bb7b6fd3e5d51aaaee14fa88b7608b2981f971f150557fb00a38d379ce59c4e5c96bf6033f96b0121ee10cb6379c1292c4e089989270df523c4d34674f
SSDEEP

192:CvYQ9NpgHQ0Hhg0MpJ6yO3wxieYRvoR/A2Z9+JzA9cclMcfrPGQX90qev4EQnB0s:k9bue0UOAc1OL8JhclHreC9egEHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18427e4ae2bb59a90172afdd9c989403

Files

18427e4ae2bb59a90172afdd9c989403
.exe windows:5 windows x86 arch:x86

86db667a5f2f09bea842de3e9da53919

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
GetWindowsDirectoryW
lstrcatW
CreateFileW
VirtualAlloc
GetProcessHeap
TerminateProcess
IsDebuggerPresent

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

GetOpenFileNameW
FindTextW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
ChooseFontW

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ