18777cb0373025dd7b2cb94c317be96c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18777cb0373025dd7b2cb94c317be96c
Size

103KB
MD5

18777cb0373025dd7b2cb94c317be96c
SHA1

391afe9d5bad2506657b309e9e4f1d2da203212e
SHA256

2f6d07710c20614cb1f9da8ac3d407f4304f391af039794e273e40c2b11ebe7b
SHA512

eb254e579c0a8929b386bf8f478a963a02824a8e2589c6b004ab9b1e2d867196f1e086c9f29c6120a6c0f2dd25943ee12f20b3f19d10e4d77cde9024283db038
SSDEEP

1536:QbXuWs0wVfSlrubAJUDVOySigQwCCFEdau8Eavc44SsVHplktGUDbX:Q6tEmDVOtigiCFMV4RsVJlkBDb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18777cb0373025dd7b2cb94c317be96c

Files

18777cb0373025dd7b2cb94c317be96c
.exe windows:4 windows x86 arch:x86

69ebe24ea58fda43292c91f3c3b4d2cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyIcon
CreateMenu
CreateIconFromResourceEx
CopyRect
CharUpperBuffA
CharToOemBuffA
CharLowerA

kernel32

GetLocalTime
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
TlsGetValue
TlsFree
EnumResourceNamesA
ExitProcess
FlushFileBuffers
FreeResource
GetDateFormatA
GetLastError
GetModuleHandleA
MapViewOfFile
SetCurrentDirectoryA
SetEndOfFile
SetLastError

Sections

.text
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data0
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE