18fb5f66d640d4d09bf3669b7dfd637e0877c170d9aa2d403ce0dfb50a7798b3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18fb5f66d640d4d09bf3669b7dfd637e0877c170d9aa2d403ce0dfb50a7798b3.exe
Size

9.0MB
MD5

a09422b0878722409048367b467ae74d
SHA1

6ad7e841df71841a5c9ad4a2c026771f12a7ef25
SHA256

0e7047fb022c0c0917a9963e7ec4cb506a7375d830c7ff32e20f52da600e19fe
SHA512

9555834b6b896c80c5d3d6fc48bf135ba31d88fbdc4b522cc563e1426361baf1a7599e665ddb1386eb91180b278900fd4108577dd7ec4cbaa9060923bf0fb005
SSDEEP

98304:jDsXAebvst6lNuHXFqzxsWoXOTWNfIek9Auu:jYQToD1oXOTWle96

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18fb5f66d640d4d09bf3669b7dfd637e0877c170d9aa2d403ce0dfb50a7798b3.exe

Files

18fb5f66d640d4d09bf3669b7dfd637e0877c170d9aa2d403ce0dfb50a7798b3.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 229KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ