18a620d868779ca077781cc4addf203df15e62377bfb28a3c9aad95981f53c57

Sharing

Copy URL Twitter E-mail

General

Target

18a620d868779ca077781cc4addf203df15e62377bfb28a3c9aad95981f53c57
Size

55KB
MD5

22d26bc8ebf121683c4f2463f131ddc0
SHA1

7f2884750fd2302c14b3e81308473391363fbd22
SHA256

18a620d868779ca077781cc4addf203df15e62377bfb28a3c9aad95981f53c57
SHA512

6445953a2990c7daeae5ce214b7c98b69be7bbb67eacc36dc8f0bb787a01e9fe55ed05b1269b38d0f58c445e56e288053ccccb3281cdcce9245a4e27977ca331
SSDEEP

1536:SknkSfCUtOTgBUtLk10CqvsaxmtMtNHe:SknkSfZWCoC0Cqvf39e

Score

N/A

Malware Config

Signatures

Files

18a620d868779ca077781cc4addf203df15e62377bfb28a3c9aad95981f53c57
.exe windows x86

52808dc9d3413e8b2b20f741b1c4a829

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
MulDiv
FileTimeToDosDateTime
GetProcAddress
lstrcmpW

imm32

ImmGetHotKey
ImmGetCompositionStringW
ImmGetCompositionFontW
ImmNotifyIME
ImmRequestMessageA
ImmGetCandidateListA
ImmConfigureIMEW
ImmGetIMEFileNameA
ImmConfigureIMEA
ImmGetGuideLineW
ImmDisableIME
ImmGetStatusWindowPos
ImmSetHotKey
ImmDestroySoftKeyboard
ImmGetDescriptionA
ImmShowSoftKeyboard
ImmAssociateContextEx
ImmGetImeMenuItemsA
ImmGetIMEFileNameW
ImmGetRegisterWordStyleA
ImmGetVirtualKey
ImmUnregisterWordA
ImmGetCandidateWindow
ImmGetIMCCSize
ImmGetConversionStatus
ImmSetCompositionFontA
ImmIsUIMessageW
ImmGetCompositionStringA
ImmReleaseContext
ImmLockIMC
ImmLockIMCC
ImmGenerateMessage
ImmEnumRegisterWordW
ImmSetCompositionStringA
ImmGetIMCCLockCount
ImmIsIME
ImmEscapeA
ImmSetCompositionFontW
ImmInstallIMEW
ImmUnlockIMCC
ImmGetOpenStatus

shlwapi

PathIsPrefixA
SHRegWriteUSValueW
StrIsIntlEqualA
StrToIntA
UrlCreateFromPathA
StrSpnA
SHRegQueryInfoUSKeyW
PathIsUNCServerShareW
PathIsRelativeW
StrCSpnA
StrChrA
PathRemoveArgsA
SHRegisterValidateTemplate
SHRegDeleteUSValueW
PathFindSuffixArrayW
PathIsURLW
SHRegSetPathA
StrStrIA
SHRegCreateUSKeyW
UrlIsA
PathMakePrettyA
PathFileExistsW
StrTrimA
StrRStrIA
PathUndecorateA
SHRegGetBoolUSValueW
SHRegSetUSValueW
PathMakeSystemFolderA
SHRegOpenUSKeyA
AssocQueryStringByKeyA
UrlUnescapeW
StrRetToStrA
SHGetInverseCMAP
PathIsRelativeA
SHGetThreadRef
UrlCanonicalizeA
PathSetDlgItemPathW
SHRegDeleteEmptyUSKeyA
StrToIntExW
PathSetDlgItemPathA
PathFindExtensionW
PathIsFileSpecW
UrlUnescapeA
PathGetArgsW
StrDupW
IntlStrEqWorkerW
SHQueryValueExA
PathCommonPrefixW
PathIsLFNFileSpecA

wtsapi32

WTSOpenServerA
WTSVirtualChannelQuery
WTSSendMessageW
WTSVirtualChannelPurgeOutput
WTSQuerySessionInformationW
WTSVirtualChannelClose
WTSDisconnectSession
WTSSendMessageA
WTSFreeMemory
WTSSetUserConfigW
WTSEnumerateSessionsW
WTSTerminateProcess
WTSLogoffSession
WTSSetSessionInformationA
WTSEnumerateProcessesW
WTSEnumerateProcessesA
WTSQueryUserConfigA
WTSWaitSystemEvent

comdlg32

ChooseColorA

user32

ExcludeUpdateRgn
DialogBoxParamW
EnumDisplayDevicesW
SetRectEmpty
EndDialog
IsDialogMessageW
TrackPopupMenu
DdeDisconnect
SetWindowsHookExA
BeginPaint
AnimateWindow
CallWindowProcW
CharLowerBuffA
DdeCreateDataHandle
GetKeyboardState
wvsprintfA
SendNotifyMessageW
SendMessageA
OemKeyScan
IsCharAlphaNumericW
AttachThreadInput
MessageBoxW
IsZoomed
SetMessageQueue

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

52808dc9d3413e8b2b20f741b1c4a829

Headers

File Characteristics

Imports

kernel32

imm32

shlwapi

wtsapi32

comdlg32

user32

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 11KB - Virtual size: 12KB

.xdata Size: 7KB - Virtual size: 6KB

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 11KB - Virtual size: 12KB

.xdata
Size: 7KB - Virtual size: 6KB