18b47b0d248b6f0ba122ff99399c7ee23ec1ea2fee85a2cf90d26eebed0d4c05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18b47b0d248b6f0ba122ff99399c7ee23ec1ea2fee85a2cf90d26eebed0d4c05
Size

5.7MB
MD5

d5d00c905e688fde84c8441bd91fe46b
SHA1

e494bbc3fdb31d60feaf9b7c9d8cd66759fcbcb5
SHA256

18b47b0d248b6f0ba122ff99399c7ee23ec1ea2fee85a2cf90d26eebed0d4c05
SHA512

0465a1256bc10bef4af52da6501f68dae0b6906aa322864fb73b25d15d948ba8b0087ad14f161d574ca9f60578ab83045ed632bcda35148362c8c4f5537c766d
SSDEEP

49152:UTWq0Xk68AR0QbaxP+nqkSbgKw4iYbI92rL3JGcWLMrZh7/:UKq0068AR+xPK1u+2rlXW4rZ9/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18b47b0d248b6f0ba122ff99399c7ee23ec1ea2fee85a2cf90d26eebed0d4c05

Files

18b47b0d248b6f0ba122ff99399c7ee23ec1ea2fee85a2cf90d26eebed0d4c05
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SettingsManager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ