18e2026764a6b9d3b7577e2053d68c2cbe4b98c7af648da272428b152201adcb

Sharing

Copy URL Twitter E-mail

General

Target

18e2026764a6b9d3b7577e2053d68c2cbe4b98c7af648da272428b152201adcb
Size

196KB
MD5

2be1d11f3f89b5194a76305f16fef7ca
SHA1

10b6380cae63349767802647a86d2c577e8c9350
SHA256

18e2026764a6b9d3b7577e2053d68c2cbe4b98c7af648da272428b152201adcb
SHA512

3a2694cdc0d73786bc4896feb43b455b38fea2e1278736b69c2108a0b303aa5bdb1f9897a784ed32fe704dbe2565fea8ad8b8c4bffd39d2b5936d36a9bcf74b0
SSDEEP

1536:ZVLSvyrfbSwWEP115RUIV6ffI8xotrah13/8HJNyyriH4wkfdmcGAN28KD+YzGJQ:OvyrfbfWEPzU7fNSa2+eiH43fPZKfV

Score

N/A

Malware Config

Signatures

Files

18e2026764a6b9d3b7577e2053d68c2cbe4b98c7af648da272428b152201adcb
.exe windows x86

dba2dfe8ff406005cbc83a2bb388d802

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrcatW
VirtualAlloc
HeapAlloc
GetProcessHeap
_lclose
WideCharToMultiByte
WaitForSingleObject
UnhandledExceptionFilter
TerminateProcess
Sleep
SetUnhandledExceptionFilter
SetEvent
SetErrorMode
SearchPathW
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LocalReAlloc
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryA
IsBadCodePtr
GlobalUnlock
GlobalSize
GlobalLock
GlobalGetAtomNameW
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetProfileStringW
GetProfileIntW
GetProcAddress
GetPrivateProfileStringW
GetModuleHandleA
GetLocaleInfoW
GetLastError
GetFileAttributesW
GetDriveTypeW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FormatMessageW
ExitThread
ExitProcess
CreateThread
CreateProcessW
CreateFileW
CreateEventW
lstrlenW
CloseHandle

user32

UnregisterDeviceNotification
UpdateWindow
wsprintfA
GetSysColor
OpenIcon
CharNextW
CharUpperA
CharNextA
IsWindow
GetWindowContextHelpId
SendMessageA
LoadBitmapA
UnhookWindowsHook
TranslateMessage
TranslateAcceleratorW
SystemParametersInfoW
ShowWindow
SetWindowPos
SetRectEmpty
SetRect
SetParent
SetMenu
SetForegroundWindow
SetCursor
SetActiveWindow
RemoveMenu
RegisterDeviceNotificationW
RegisterClipboardFormatW
PeekMessageW
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
LoadMenuW
LoadImageW
LoadIconW
LoadAcceleratorsW
IsWindowVisible
IsWindowEnabled
IsRectEmpty
IsIconic
IsCharAlphaW
IsCharAlphaNumericW
InvalidateRect
InsertMenuW
InflateRect
GetWindowPlacement
GetSystemMetrics
GetSubMenu
GetMenuItemCount
GetMenu
GetDialogBaseUnits
GetDesktopWindow
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
EqualRect
EnableMenuItem
DrawTextW
DrawMenuBar
DrawIcon
DispatchMessageW
DestroyWindow
DestroyMenu
DeleteMenu
CreateWindowExW
CreateMenu
CopyAcceleratorTableW
CheckMenuItem
CharLowerBuffW
BringWindowToTop
AdjustWindowRect
IsZoomed

gdi32

DeleteMetaFile
DeleteObject
ExcludeClipRect
GetBkMode
GetDIBits
GetDeviceCaps
GetObjectW
GetPaletteEntries
GetROP2
GetStockObject
GetSystemPaletteEntries
GetSystemPaletteUse
GetTextExtentPoint32W
LineTo
CreatePatternBrush
MoveToEx
PatBlt
Polygon
RealizePalette
Rectangle
DeleteDC
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetROP2
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
StretchDIBits
TextOutW
GetFontLanguageInfo
UnrealizeObject
StrokePath
AbortPath
CreateSolidBrush
RestoreDC
CloseMetaFile
CreatePalette
CreateMetaFileW
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CreatePen

advapi32

RegQueryValueExW
RegOpenKeyExA

shell32

SHGetFileInfoW
ExtractIconW
DragQueryFileW
DragFinish
DragAcceptFiles
ShellAboutW

winmm

timeGetTime

msvcrt

memset
memcpy

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.a0
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dba2dfe8ff406005cbc83a2bb388d802

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

winmm

msvcrt

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 132KB - Virtual size: 131KB

.data Size: 1024B - Virtual size: 1020B

.a0 Size: 20KB - Virtual size: 19KB

.rsrc Size: 39KB - Virtual size: 39KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 132KB - Virtual size: 131KB

.data
Size: 1024B - Virtual size: 1020B

.a0
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 39KB - Virtual size: 39KB