18ff212df33069e5e41bf12b070433ae8de7679866bd2c9f2a89b7b29a1be62f

Sharing

Copy URL

Twitter E-mail

General

Target

18ff212df33069e5e41bf12b070433ae8de7679866bd2c9f2a89b7b29a1be62f
Size

248KB
MD5

f1af721e64951919447612d4c427d5e6
SHA1

983969761df3186cd41b61b06584e647614fb44e
SHA256

18ff212df33069e5e41bf12b070433ae8de7679866bd2c9f2a89b7b29a1be62f
SHA512

a7dfe6a36a59bfcdbbb585cf00d459b24547cdee61405f0e24233a8378b1b1da7fa81a3a31e90ffcabd85fc525dcbf3aa802e5f3ec066c5f51efd3ef7720d4ac
SSDEEP

6144:Lt3TtVavOHcgt6joQsI6b9qHB/ppffbdY6ztXeVxfUwis:BTtUvO1t6joMe+B/plbdY6YIq

Score

N/A

Malware Config

Signatures

Files

18ff212df33069e5e41bf12b070433ae8de7679866bd2c9f2a89b7b29a1be62f
.exe windows x86

ae48123af562122dce254e94d91a9e6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
VirtualAlloc
GetVersionExA
GetEnvironmentStringsW
CreateMutexA
GetCurrentThread
CreateEventA
GetCurrentProcessId
GetEnvironmentStrings
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
Sleep
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEnvironmentVariableA
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind

gdi32

SelectPalette
CreateDIBSection
CreateDIBitmap
SetTextColor
GetStockObject
SetStretchBltMode
Rectangle
SelectClipRgn
StretchBlt
ExtTextOutW
CreatePalette
CreateBitmap
GetStretchBltMode
SetViewportOrgEx
SetBkColor
CreateRectRgnIndirect
SetWindowOrgEx
CreateCompatibleBitmap
CreatePenIndirect
ExtSelectClipRgn
SaveDC
ExtCreatePen
SetBkMode
MoveToEx
DeleteDC
GetObjectA
CreateFontIndirectW
GetClipBox
BitBlt
DeleteObject
RestoreDC
RealizePalette
LineTo
GetObjectW
CreateFontIndirectA
ExtTextOutA
GetTextExtentPoint32W
SetMapMode
PatBlt
GetDeviceCaps
SelectObject
CreateCompatibleDC
RectVisible
CreateSolidBrush

ole32

CoInitialize
RegisterDragDrop
CreateBindCtx
CoCreateGuid
StringFromCLSID
CoFreeUnusedLibraries
CoTaskMemAlloc
CLSIDFromProgID
StgCreateDocfileOnILockBytes
CoRevokeClassObject
CoInitializeSecurity
OleRun
CreateILockBytesOnHGlobal
CoDisconnectObject
CoUninitialize
CoRegisterMessageFilter
CreateStreamOnHGlobal
OleFlushClipboard
GetRunningObjectTable
CLSIDFromString
RevokeDragDrop
CoLockObjectExternal
CoQueryProxyBlanket
ReleaseStgMedium
CoGetClassObject
CoTaskMemFree
OleInitialize
CoQueryAuthenticationServices
OleUninitialize
CoCreateInstance

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 159KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae48123af562122dce254e94d91a9e6d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

ole32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 159KB - Virtual size: 185KB

.rsrc Size: 39KB - Virtual size: 38KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 159KB - Virtual size: 185KB

.rsrc
Size: 39KB - Virtual size: 38KB