18797bc133c72b44573104797a22d6e5aaa3fecf3047eac796359764ae2a2d3d | Triage

Sharing

General

Target

18797bc133c72b44573104797a22d6e5aaa3fecf3047eac796359764ae2a2d3d
Size

865KB
MD5

c97b665598e067fe15655e392ad35e9d
SHA1

3ef759ff66ea351365d2f3847c5001633fce16c8
SHA256

18797bc133c72b44573104797a22d6e5aaa3fecf3047eac796359764ae2a2d3d
SHA512

1ad8038c5456599384e2ab3cb5ebb6737047052e7a35135f212999eac701485042814a029c95ac02af2dcbcef5f3551a8f91e24e6407109a7bb5409a4ce404b7
SSDEEP

24576:COVIHaS9SO4w9vmRlaPdZ8syn+b1rzzbYqVU:COVkzciolWD8synkRzbYuU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18797bc133c72b44573104797a22d6e5aaa3fecf3047eac796359764ae2a2d3d

Files

18797bc133c72b44573104797a22d6e5aaa3fecf3047eac796359764ae2a2d3d
.exe windows:5 windows x86 arch:x86

03299f79f30573f9a5979ba63013ec74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DestroyIcon

gdi32

GetPixel

comdlg32

GetFileTitleW

winspool.drv

GetJobW

advapi32

RegCreateKeyExW

shell32

ord680

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW

oledlg

OleUIBusyW

ole32

OleDestroyMenuDescriptor

oleaut32

SysAllocStringLen

Sections

.text
Size: 826KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE