818[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

818.exe
Size

185KB
MD5

a64691489f1a52f8ad4a34d9b013830f
SHA1

e73db8624c0e7a49b73a21c61200d0a621bad4cb
SHA256

2c3310a45db53d2bc092521b417c9434c919dce00876b386e39a5b7cffa3c58f
SHA512

a8d6497db70da2ba6ee34f345477b849d879e81ac4f1b7f294b7b4b2a1b8fb1846e7c6b77525229771a229fb1a37c144a7645f96a742fe15d7b2f3972b557879
SSDEEP

3072:6rtHTIN7WXsrbiUSAY4pf7JCIaxIJlShDGbm/5uDGWqB2l7:6ZzXcrjztp7JliNum/5

Score

N/A

Malware Config

Signatures

Files

818.exe
.exe windows x86

5231d45d27faab064697cd89d612e981

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
InterlockedDecrement
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetEnvironmentVariableA
GetOEMCP
GetVersionExA
LeaveCriticalSection
FlushFileBuffers
LCMapStringA
GetLastError
GetQueuedCompletionStatus
GetVersion
GetEnvironmentStringsW
MultiByteToWideChar
HeapFree
SetHandleCount
GetStringTypeW
LoadLibraryA
SetUnhandledExceptionFilter
SetFilePointer
VirtualQuery
DeleteCriticalSection
VirtualFree
GetSystemInfo
LCMapStringW
SetLastError
GetStringTypeA
GetCurrentProcess
SetStdHandle
UnhandledExceptionFilter
HeapCreate
WriteFile
HeapDestroy
IsBadStringPtrA
GetEnvironmentStrings
TlsSetValue
GetCurrentThreadId
InitializeCriticalSection
WideCharToMultiByte
VirtualAlloc
GetACP
FreeEnvironmentStringsA
GetProcAddress
GetModuleHandleA
TlsGetValue
RtlUnwind
ExitProcess
GetStdHandle
lstrlenA
InterlockedIncrement
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
EnterCriticalSection
TerminateProcess
GetTickCount
CreateIoCompletionPort
IsBadCodePtr
TlsAlloc
GetCPInfo
CloseHandle
IsBadReadPtr

user32

TranslateMessage
DispatchMessageW
ShowWindow
CreateDialogParamW
PeekMessageW
IsDialogMessageW

imm32

ImmEnumInputContext
ImmReleaseContext
ImmGetContext

msimg32

AlphaBlend
GradientFill

ole32

CoInitialize
DoDragDrop
CoUninitialize

shell32

DragAcceptFiles
DragQueryFileW
DragFinish

winmm

PlaySoundW
timeGetTime

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5231d45d27faab064697cd89d612e981

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

imm32

msimg32

ole32

shell32

winmm

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 137KB - Virtual size: 136KB

.data Size: 11KB - Virtual size: 15KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 137KB - Virtual size: 136KB

.data
Size: 11KB - Virtual size: 15KB