c18e61377c15798559148517fa33f70b5ecbc065512d5530db00d01c49112e0aN[.]exe

General

Target

c18e61377c15798559148517fa33f70b5ecbc065512d5530db00d01c49112e0aN.exe
Size

168KB
MD5

ea81140e4a6def600fd2e1c769a7dd50
SHA1

07ca6da973eefab97ffe23921bc15c29daeabf40
SHA256

c18e61377c15798559148517fa33f70b5ecbc065512d5530db00d01c49112e0a
SHA512

7af7057f1e7d06519fd7f5fc64eed674f22e2fbf1e31b3afcd6336d63c7992bd2edea4a38d7c1b43529c0ac8b5f526e1de3872a5c7f46c520cc92cc3bfe78fcc
SSDEEP

3072:k1IM6ptoGzKtuNMSL1KyY6cDcw6IKPhjoXfhFYex1j2UuZiVeqUL4vlX5h3sqm:wITtzc8xt1PmXfrbl2dqUMvl5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c18e61377c15798559148517fa33f70b5ecbc065512d5530db00d01c49112e0aN.exe

Files

c18e61377c15798559148517fa33f70b5ecbc065512d5530db00d01c49112e0aN.exe
.dll windows:4 windows x86 arch:x86

07024baf21aa85d398b4e6ce172f4b2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_Write
ImageList_GetBkColor
ImageList_Destroy
ImageList_DrawEx
ImageList_Create
ImageList_Read
ImageList_Add
ImageList_Remove
ImageList_Draw

gdi32

GetDIBColorTable
CreateDIBitmap

user32

GetCursor
OpenIcon
GetClientRect
GetClipboardData
GetCursorPos
GetMenu
DrawMenuBar
GetDC

kernel32

VirtualAlloc
ReadFile
GetModuleHandleA
LoadLibraryA
SetEndOfFile
GetLastError
ResetEvent
ExitProcess

Exports

Exports

UYS3Zdz67@24
BwEO5d
_oiPxl37Yg@16
_07aJGH@8
_cTzcbZDl
cihl3DJrW1Ge
_fw3qEh3A
_RUJ5N
LsERixT58no8Y
_6ZOTxx2u0x
_cT90GypzD3W@24
_clEQfN6ibVY8U
_IqhP3CPp@16
124EIM@20
DHjC2tq@8
_Zo9wLjajXExH9
05TUiBVj
_SWA6DoceDk@24
DUvhlIWEgxJpJS@4
OEjcY98GT@8
_tXRTxmXrGnsbc@20
t_GKzV1qXOQQxm
s702xPvTqJMAfn@8
8LDtqD
_UjMcbLXsOQP@20
jMuCr7v7@16

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07024baf21aa85d398b4e6ce172f4b2e

Headers

File Characteristics

Imports

comctl32

gdi32

user32

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 3KB - Virtual size: 182KB

.data Size: 148KB - Virtual size: 148KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 3KB - Virtual size: 182KB

.data
Size: 148KB - Virtual size: 148KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB