c918bad22181af2949c663f19a3405bf6cbdb32397265846f57724fff5239756N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c918bad22181af2949c663f19a3405bf6cbdb32397265846f57724fff5239756N
Size

168KB
MD5

f29ce0cb48ea943484fa84ee8028fe60
SHA1

1e73e7242ca41c5dd83fbb307e5ca6343a6623f7
SHA256

c918bad22181af2949c663f19a3405bf6cbdb32397265846f57724fff5239756
SHA512

25416ec9954d0800a115b4fb3ccf411cd59c9c0707d3257744a0153ceb253dfe4d6269476f4054c44d9309218485a3699435995aba2f13f63829122e711142f7
SSDEEP

3072:/el11q4FjnSBipm+Ao4K7NASjfqaR4ow+RIgGPmQNQW+nfn9QtN2x:/el11q4FjnVuoJeDOZRIgGeQNJ+/++

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c918bad22181af2949c663f19a3405bf6cbdb32397265846f57724fff5239756N

Files

c918bad22181af2949c663f19a3405bf6cbdb32397265846f57724fff5239756N
.exe windows:4 windows x86 arch:x86

31a842cf2303df0fd5a58da3e3b4e70f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
SetStdHandle
CreateFileA
GetCPInfoExA
GetUserDefaultLCID
InterlockedDecrement
Sleep
InterlockedIncrement
EnterCriticalSection
InitializeCriticalSection
RaiseException
EnumResourceNamesA
IsValidCodePage
EnumSystemLocalesA
LeaveCriticalSection
HeapSize
IsValidLocale
RtlUnwind
WriteConsoleA
GetCurrentThreadId
RaiseException
GetConsoleOutputCP
DeleteCriticalSection
GetVersionExA
GetLastError
WriteConsoleW

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcStringFreeA

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ