18b2f49cf268fc2d747000f3f17c4488 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18b2f49cf268fc2d747000f3f17c4488
Size

33KB
MD5

18b2f49cf268fc2d747000f3f17c4488
SHA1

bae60a9f024261c6108b823062feff7c7a71b19e
SHA256

e172138276e85674efb22e62c32047f33eb8ff57247747a3718c9859a97c9dbc
SHA512

87690de1e28dfd9d4e2503e6f315774e302e189f415111597b60b693e498b6ab4ac6edab0f1cc3c30ed2f56bf444c7ea632cb9c2ab213628698d34f3f74740a3
SSDEEP

768:7lIGpJ3bZy1SAP6Cb2ye/w4UbDN3jKgUjIjQ0+GtmZuAZonV:5xJLY1SAyQ2yGwRzhIGtvV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18b2f49cf268fc2d747000f3f17c4488

Files

18b2f49cf268fc2d747000f3f17c4488
.exe windows:4 windows x86 arch:x86

2ec251c946ee25dec80fd304c1fc008a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

user32

GetWindowLongA
GetForegroundWindow
GetClassLongA
wsprintfA

gdi32

GdiFlush

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ