18dea7412c005cca23f61deef63bb41a

General

Target

18dea7412c005cca23f61deef63bb41a
Size

53KB
MD5

18dea7412c005cca23f61deef63bb41a
SHA1

17726fb9adb7a4f03a14b9a547fb7b28956dd3ec
SHA256

bfa67e7763d1e5ac33c6d2bf5ecbc73cde55d75ddfd2b621805cd4f1c507ad11
SHA512

e216b726380232b1b16ed7eb9831226267910df37a4a77d281784133195153b6bb3153680bd75d82a6c1da76b6b062d6a074dad9052cfc81d776838c456288c3
SSDEEP

768:YeSjP6R4Lt3o2i8GMMMQUSZcNg5T5kM72f4uKYMX+6+UDQEJ4jfmRUux5HxET:YeSjP7q8Gp9XTSBKYk+eJ4bAU0bET

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18dea7412c005cca23f61deef63bb41a

Files

18dea7412c005cca23f61deef63bb41a
.exe windows:4 windows x86 arch:x86

343dd8f9e319e9affa4a61d1a81dd6b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA
GetStringTypeA
lstrcpyA
MultiByteToWideChar
GetVersion
LCMapStringA
WriteFile
TerminateProcess
GetOEMCP
LCMapStringW
CreateFileA
GetStringTypeW
SetFilePointer
GetCPInfo
GetACP
GetCurrentProcess
lstrcatA
GetModuleFileNameA
SetHandleCount
lstrcpynA
GetFileType

user32

GetCursor
GetMenu
GetDlgItem
GetFocus
EndDialog
CloseWindow
DrawIconEx
GetWindowTextLengthA
GetDC
IsMenu
InsertMenuA
DialogBoxParamW
DrawTextW
LoadMenuA
GetWindowTextA
CopyIcon
DrawIcon
CopyImage
CopyRect
LoadCursorA
CreateIcon
IsWindow
DrawTextA
DialogBoxParamA

comctl32

CreateStatusWindowW
MenuHelp
CreateMappedBitmap
ImageList_Create
ImageList_AddIcon
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_Destroy
CreateUpDownControl
ImageList_Add
CreateToolbarEx
ImageList_DragEnter

advapi32

RegQueryValueA
RegDeleteValueA
RegDeleteValueW
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExW
RegEnumKeyExA
RegQueryValueW
RegCreateKeyExA
RegDeleteKeyA
RegCreateKeyW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 16.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

343dd8f9e319e9affa4a61d1a81dd6b6

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 46KB - Virtual size: 16.5MB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 46KB - Virtual size: 16.5MB