18ef98bf7d663eceea06ae792d71f9f0

Sharing

Copy URL

Twitter E-mail

General

Target

18ef98bf7d663eceea06ae792d71f9f0
Size

26KB
MD5

18ef98bf7d663eceea06ae792d71f9f0
SHA1

0dba1e6070c4986aa643ca59c56f0650d301710b
SHA256

1efd039719141310e910e703cfb33849a2033810c8c2f585f7132763bbb9a524
SHA512

f7e4ec03e01df7c162d545f01039b65bd9fa390e167ca4e6761057c443141221a215050cc710be50767af4e184e4042b368f0fcfa95706bcd2c3cfa918b3c3ef
SSDEEP

384:6X7weprUxVxdcZGbdGuo0C7Y+9NMrnYCUdPV5qRyp5b7zTM+IUCv:kwDcOozNMrnIdP7p5jTrQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18ef98bf7d663eceea06ae792d71f9f0

Files

18ef98bf7d663eceea06ae792d71f9f0
.exe windows:4 windows x86 arch:x86

7d42a658872890766d2879fdbf711b18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetModuleFileNameA
OpenEventA
MultiByteToWideChar
lstrlenA
SetFileAttributesA
WinExec
SetFileAttributesW
GetProcAddress
ResetEvent
WaitForMultipleObjects
lstrcmpA
CreateToolhelp32Snapshot
Process32First
Process32Next
CompareStringA
lstrcpyA
FindResourceA
LoadResource
SizeofResource
WaitForSingleObject
CloseHandle
DeleteFileA
ExitThread
TerminateThread
GetTickCount
CreateFileA
WriteFileEx
WaitForSingleObjectEx
GetModuleHandleA
GetModuleHandleW
CreateProcessA
GetSystemDirectoryA
HeapAlloc
GetProcessHeap
HeapFree
ExitProcess
GetCommandLineA
CreateEventA
SetEvent
GetLastError
CreateThread
Sleep

user32

PostQuitMessage
TranslateMessage
DispatchMessageA
PeekMessageA
MsgWaitForMultipleObjects
RegisterClassA
SetWindowTextA
DefWindowProcA
CreateWindowExW
DestroyWindow
MessageBoxA
CreateWindowExA
LoadIconA
FindWindowA
wsprintfW
wsprintfA
ShowWindow

advapi32

RegNotifyChangeKeyValue
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA
RegSetValueExW
RegOpenKeyA
RegQueryValueExA
RegCloseKey

shell32

Shell_NotifyIconA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

SysAllocString
SysFreeString

wininet

InternetGetConnectedState

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d42a658872890766d2879fdbf711b18

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

wininet

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 9KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 9KB

.rsrc
Size: 10KB - Virtual size: 10KB