18dd0b9f7b648193b82f7dd5160e1a91

General

Target
18dd0b9f7b648193b82f7dd5160e1a91
Size 395KB
Sample231230-pxkf4aahcr
SHA256 7341f754c4a5399fb37e2f6432f3ceaadc9a4f82fea30f0c4b0543ad1d684dbb
MD5 18dd0b9f7b648193b82f7dd5160e1a91
SHA1 4cb6719e2b538a45b6038290cbd9dfad8fcbd32d
SHA512 8126eafd73c104ed7df0e8dc1c7a0b25a51d5c61fac60e5afeccd3496601bfc7894542684f7f92535af41261fa196918c6a62b5d2d44e78739edce640e2d3971
SSDEEP 12288:odWk7SNNmeeKjEVPD/G36HbVEnRiZAPtHSw:owQeeRPUEbViiZ2j
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18dd0b9f7b648193b82f7dd5160e1a91

File Explorer

18dd0b9f7b648193b82f7dd5160e1a91

.exe 395KB

18dd0b9f7b648193b82f7dd5160e1a91

IMPHASH ea8de473df0698dc330fdb95b5eda1f1
SHA256 7341f754c4a5399fb37e2f6432f3ceaadc9a4f82fea30f0c4b0543ad1d684dbb
MD5 18dd0b9f7b648193b82f7dd5160e1a91
SHA1 4cb6719e2b538a45b6038290cbd9dfad8fcbd32d
SHA512 8126eafd73c104ed7df0e8dc1c7a0b25a51d5c61fac60e5afeccd3496601bfc7894542684f7f92535af41261fa196918c6a62b5d2d44e78739edce640e2d3971
SSDEEP 12288:odWk7SNNmeeKjEVPD/G36HbVEnRiZAPtHSw:owQeeRPUEbViiZ2j
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11314

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStdHandle GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW CompareFileTime CreateDirectoryW CreateFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFileTime GetFullPathNameW ReadFile SetFileAttributesW WriteFile CloseHandle GetLastError HeapAlloc HeapFree GetProcessHeap VirtualProtect GetModuleHandleW LocalFree FormatMessageW lstrcmpW lstrcpyW lstrcatW lstrlenW CopyFileW FileTimeToSystemTime SystemTimeToFileTime CompareStringW WideCharToMultiByte GetConsoleOutputCP WriteConsoleW GetConsoleWindow SetFilePointerEx SetEndOfFile ReadConsoleW HeapReAlloc HeapSize GetConsoleMode GetConsoleCP QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetModuleFileNameW MultiByteToWideChar ExitProcess GetModuleHandleExW GetCommandLineA GetACP GetFileType FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW LCMapStringW FlushFileBuffers DecodePointer

user32

CharUpperBuffW ShowWindow LoadStringW GrayStringW GetDC

Sharing

General

Malware Config

Signatures

File Explorer

18dd0b9f7b648193b82f7dd5160e1a91

kernel32

user32

generic