9b18aba0ce6f44c1218f3e555cc8666a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b18aba0ce6f44c1218f3e555cc8666a
Size

166KB
MD5

9b18aba0ce6f44c1218f3e555cc8666a
SHA1

7aca630cf04418f172fe39b1e66cd3615a711e8e
SHA256

8a6f56cdac40cb4813f36db537eca24d17c46d7f4e2a285cfabda89fc42c0e05
SHA512

dcf519a88365b97ddc76271f588344861f00f3272af25fdae769ae8251628d437a1a2e47f55ce12b02997f97fd8b49b66bce74b01533a91087aebb0bed49ef1c
SSDEEP

3072:CKO42TOBHcH+k3Pvnmg7O2NhMF6CRDi47J9GySgWLvm/t:CKO4MMHcH+kXmg7O2NhRv4lSgWTm/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b18aba0ce6f44c1218f3e555cc8666a

Files

9b18aba0ce6f44c1218f3e555cc8666a
.exe windows:4 windows x86 arch:x86

a718824621a5149dd0e3c2a670f3a7b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpungeConsoleCommandHistoryW
EnumResourceNamesW
SetCurrentDirectoryW
GetProcessShutdownParameters
OpenFileMappingA
RestoreLastError
ReadFile
GetLocaleInfoA
CmdBatNotification
LZOpenFileA
FindActCtxSectionGuid

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 59KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE