00018c1ef2142b2fd7acb38433ba9110N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00018c1ef2142b2fd7acb38433ba9110N.exe
Size

42KB
MD5

00018c1ef2142b2fd7acb38433ba9110
SHA1

059f2d9bb4cd9084524332175bfe72e2046ffa2c
SHA256

465ce4c215c203c8891f24c81dcc37e773856631f000022601d69b810c74c69c
SHA512

36d52a69d3c170e43ff22d76c0b4fde082c889aaf23dab817b612e5ada2bb415c8654725e98c100d7e1a4abd2b0ecbcc1772e8e71724d01dbc26270e455b0571
SSDEEP

768:5g+3i/tfhKfitqDS8QIYjhVGjBce+L91lqRV7r7xlhaacJe/fsMM6JKK:/3Am2dmce+xsxl656Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00018c1ef2142b2fd7acb38433ba9110N.exe

Files

00018c1ef2142b2fd7acb38433ba9110N.exe
.exe windows:5 windows x86 arch:x86

5900068b46e9a58eb0bafafafe2f6fb2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
sprintf
setlocale
printf
exit
wprintf

advapi32

RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

kernel32

SetThreadLocale
GetCurrentProcess
GetProcessAffinityMask
GetUserDefaultLCID
SetThreadAffinityMask
GetVersionExW
FormatMessageW
GetConsoleOutputCP
SetConsoleOutputCP
GetOEMCP
GetCurrentThread
GetModuleHandleA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE