18a0a85191aa90896db6a1a7c09dc19a702f201acbb4ddcda6e531a3b37d644eN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18a0a85191aa90896db6a1a7c09dc19a702f201acbb4ddcda6e531a3b37d644eN
Size

94KB
MD5

19942ea3401c09387b3b360be3d806d0
SHA1

c576f37ef5f6133389464ec3519cb4658f2c070e
SHA256

18a0a85191aa90896db6a1a7c09dc19a702f201acbb4ddcda6e531a3b37d644e
SHA512

e7615f2a120fec91f6666313de4d8098931e145343a98590d0717ba1617864b01a07cb31288cc603111837e7756a9013ec2326460d9bca232d2bfea1c4821bd7
SSDEEP

1536:j0IFGuQGzAtm4WtD4IeYlVHTz9n8+Zl1OKPHgcf/1Xl0dYNC6uwp9YMS8:Wwz3T14IeYPTJ8a/gUdSYNvPpVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18a0a85191aa90896db6a1a7c09dc19a702f201acbb4ddcda6e531a3b37d644eN

Files

18a0a85191aa90896db6a1a7c09dc19a702f201acbb4ddcda6e531a3b37d644eN
.exe windows:4 windows x86 arch:x86

3e02c1f42c0d03bbe4188bda798dca92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netshell

DllCanUnloadNow

msvbvm60

ord669
ord524
ord526
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord644
ord570
ord100
ord432

mmcndmgr

DllCanUnloadNow

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ