18ff914923b2e5fd4ead58abf88bae90N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

18ff914923b2e5fd4ead58abf88bae90N.exe
Size

95KB
MD5

18ff914923b2e5fd4ead58abf88bae90
SHA1

5c9875a55a1587d3095f025107c661fede6a2c8a
SHA256

1a8657db99d090e9a6ae31718c6bf741178477f374efd41e32a0cbfc0a7632e9
SHA512

3e27e86e025b87cf062010c110c83cd734284f807f3dd9bf007976d787332ec991ea36f9a9088aecddcc57719827e18aa26ad948c97621ae7b8333697428aa5f
SSDEEP

1536:o8Y/Y2zTnER7uBojYxvF3qkj7w3g5VQOYo57L19a308lsW4d69aN7REqKgY:GY2zTns7uBoExvF3qkIg593V9a3A69ak

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18ff914923b2e5fd4ead58abf88bae90N.exe

Files

18ff914923b2e5fd4ead58abf88bae90N.exe
.dll windows:6 windows x64 arch:x64

73b9275b63778d45bfb6fbf6ea4a9854

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\Users\Sameer\Desktop\PH 2.38 SRC\plugins\Select Type 2\bin\Release64\Sameer2.pdb

Imports

processhacker.exe

PhPluginAddTreeNewColumn
PhAddSettings
PhPluginCreateEMenuItem
PhGetIntegerSetting
PhAddItemList
PhSplitStringRefAtString
PhAppendStringBuilder2
PhRegisterCallback
PhMainWndHandle
PhGetOwnTokenAttributes
PhGetGeneralCallback
PhRegisterMessageLoopFilter
PhGetPluginCallback
PhFree
PhDeleteStringBuilder
PhPluginAddMenuItem
PhFormatString
PhCreateList
PhConcatStrings2
PhCreateString
PhEqualStringRef
PhCreateStringEx
PhGetTokenUser
PhSetIntegerSetting
PhInsertEMenuItem
PhSplitStringRefAtChar
PhStringToInteger64
PhGetSidFullName
PhRegisterPlugin
PhShowMessage
PhDereferenceObject
PhInitializeStringBuilder

user32

DefWindowProcW
SendMessageW
LoadAcceleratorsW
IsChild
TranslateAcceleratorW

comctl32

ord413
ord410

ntdll

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlUnwindEx
RtlCaptureContext

kernel32

WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapSize
OutputDebugStringW
HeapReAlloc
HeapAlloc
LoadLibraryExW
GetModuleFileNameW
WriteFile
LCMapStringW
CloseHandle
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
CreateFileW
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetLastError
SetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73b9275b63778d45bfb6fbf6ea4a9854

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

processhacker.exe

user32

comctl32

ntdll

kernel32

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 5KB - Virtual size: 15KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 5KB - Virtual size: 15KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB