18b247b4a4cd4109039d84a5bd5fc55f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18b247b4a4cd4109039d84a5bd5fc55f
Size

30KB
MD5

18b247b4a4cd4109039d84a5bd5fc55f
SHA1

d48114d930d957e1155d43906c803961fb9894f8
SHA256

f377d7fbac6a7373663995474525800bd9e5e5530868207e389f6e22057f6f6f
SHA512

939de6034f9226e58a577dcd9361ab0cf637b22719a7b5cebc9ced0e100d926b5d42773135d9176729011da577305f4a96b8fe0af5d038d78c0d4f70e7c7e848
SSDEEP

768:iQVXSijOcD8MI+0S0eBjJT+q9MQ2Yn+FM9S:iiV5ES0msoMQ2YnoM9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18b247b4a4cd4109039d84a5bd5fc55f

Files

18b247b4a4cd4109039d84a5bd5fc55f
.exe windows:4 windows x86 arch:x86

b4dc4624669fce00631ec6ff614896cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

wcscmp

user32

GetSystemMetrics

shlwapi

SHGetValueA

wininet

InternetQueryOptionA

shell32

SHGetSpecialFolderPathA

advapi32

RegSetValueExA

ole32

CLSIDFromProgID

oleaut32

SafeArrayDestroy

msvcp60

?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

Sections

.text
Size: 25KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE