18db566034219200abc9e2c0191236f5 | Triage

Sharing

General

Target

18db566034219200abc9e2c0191236f5
Size

490KB
MD5

18db566034219200abc9e2c0191236f5
SHA1

6effdb71bab2277fbf56645e31119ff54fe42906
SHA256

14e80338f9789a43aee1e128c46820692c4e042fa36e45f4b3263c1f5ca1eef0
SHA512

387761162319fe09c468722109e5215947a1abc414c105be374eac653a9d5c877610acbe87b43ae20475df3e2d30f1f82dd145536aaed54f3ed8966e91ba71e7
SSDEEP

12288:honob++kHvRPK02b4kJLvpIZwcMUWXYno:hon6GPF64kJaNM/XB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18db566034219200abc9e2c0191236f5

Files

18db566034219200abc9e2c0191236f5
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.myzu
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE