18e41c088abac684c090592bc7df4305[.]exe

General

Target
18e41c088abac684c090592bc7df4305.exe
Size 169KB
Sample240208-ntewrsed78
SHA256 2aa5a9c9059070191dcf750e2db3860dfd4803b5d50c8d71edc17fe3c3ef2994
MD5 18e41c088abac684c090592bc7df4305
SHA1 81667dd1afe91e291a076b15248f51a1d7e9195b
SHA512 4d5d1810779d7b037ebf24c8ff7bf3d361b0f1d0a01410bc2c1985a614e7a7757d8096addb844b179d1a0d4cb2789f7d13b66ea5456a562e9f6f2c233279735d
SSDEEP 3072:krcSwB5Wyefc5W40bkofbAEjSPskDCxu58EIX:krcSwB5WsApzAEePsl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18e41c088abac684c090592bc7df4305.exe

File Explorer

18e41c088abac684c090592bc7df4305.exe

.exe 169KB

18e41c088abac684c090592bc7df4305.exe

IMPHASH e6a462c35d266e63944cf9874893788d
SHA256 2aa5a9c9059070191dcf750e2db3860dfd4803b5d50c8d71edc17fe3c3ef2994
MD5 18e41c088abac684c090592bc7df4305
SHA1 81667dd1afe91e291a076b15248f51a1d7e9195b
SHA512 4d5d1810779d7b037ebf24c8ff7bf3d361b0f1d0a01410bc2c1985a614e7a7757d8096addb844b179d1a0d4cb2789f7d13b66ea5456a562e9f6f2c233279735d
SSDEEP 3072:krcSwB5Wyefc5W40bkofbAEjSPskDCxu58EIX:krcSwB5WsApzAEePsl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW WriteConsoleOutputCharacterA EndUpdateResourceW OpenJobObjectA InterlockedDecrement SetDefaultCommConfigW GetModuleHandleExW CreateDirectoryW GetComputerNameW FreeEnvironmentStringsA GetTickCount CreateNamedPipeW GetConsoleAliasesA TzSpecificLocalTimeToSystemTime GetVolumeInformationA LoadLibraryW GetLocaleInfoW HeapCreate GetAtomNameW GetTimeZoneInformation CompareStringW FlushFileBuffers GetStartupInfoA SetLastError GetProcAddress ResetEvent OpenWaitableTimerA LoadLibraryA GetProcessWorkingSetSize LocalAlloc DnsHostnameToComputerNameA SetCurrentDirectoryW DeviceIoControl FreeEnvironmentStringsW GetCurrentDirectoryA EnumDateFormatsW FileTimeToLocalFileTime EnumSystemLocalesA GetLocaleInfoA GetLastError HeapFree EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapAlloc Sleep HeapSize GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler FreeLibrary InterlockedExchange RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent RaiseException GetUserDefaultLCID IsValidLocale

user32

GetClassLongW

Name

.text

Size

137KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.jefabe

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.nofuxoy

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

18e41c088abac684c090592bc7df4305.exe

kernel32

user32

generic