18f2fa6dc9090a498a26cb016c8cbb80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18f2fa6dc9090a498a26cb016c8cbb80
Size

29KB
MD5

18f2fa6dc9090a498a26cb016c8cbb80
SHA1

1fdbc2679e442b0e4a4a4ac0a03915af10fdb815
SHA256

9c72bbc2a6b488da79007b462ac51c48f8bcd7f82df22b7b5ddf0f63f864d046
SHA512

5b0e7e29d68aa3e80fadd36651c992f0f0c88a0bf70078adfa161a41f3611f3b4cef6df869c97f047acd1928d007053ab184cb07bfd0c153ae35bf1b25689cb2
SSDEEP

768:AWBdiSYv3KbXHsUTMMZb1izPZAJcMpkz06f+p4:p2J6gU4MXMvzs4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18f2fa6dc9090a498a26cb016c8cbb80

Files

18f2fa6dc9090a498a26cb016c8cbb80
.exe windows:4 windows x86 arch:x86

8aae25bdc784ba4455fbd8946b0118b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
strstr
free
calloc
fopen
fclose
fwrite
__p__commode
malloc

kernel32

lstrcatA
IsDebuggerPresent
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32First
Process32Next
GetModuleHandleA
GetCurrentProcess
ReadProcessMemory
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
GetStartupInfoA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE