18cc292638ef1409b48f33289059aef493ce95b65276292bebaf4b63cf5a5af2

General

Target

18cc292638ef1409b48f33289059aef493ce95b65276292bebaf4b63cf5a5af2
Size

248KB
MD5

0cb9be2224a138b76325a517bca419dd
SHA1

536cbea9420dc90a71a47241e58ca5d5953de72d
SHA256

18cc292638ef1409b48f33289059aef493ce95b65276292bebaf4b63cf5a5af2
SHA512

85cc5cb2c03a4346f4389a16e608e7d1ba9d4cd9f77b74df15d0a64b94ada35fb47cc5618a9fd7af47e89d1b6bf7f43df692df99c5d759c307fd5c895135258f
SSDEEP

6144:fKmNWf3Ab6ogxyaR1CnxBt741IloCAz5GoZ6QiO4:/WmwyaulFCzNQQiO

Score

N/A

Malware Config

Signatures

Files

18cc292638ef1409b48f33289059aef493ce95b65276292bebaf4b63cf5a5af2
.dll windows x86

4765ead1731c2abb6506616800429e5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

PropertySheetA

kernel32

GetCommandLineA
GetDateFormatA
GetFileSizeEx
GetModuleHandleA
GetTapeParameters
GetVersionExA
GlobalLock
HeapAlloc
HeapCreate
InitializeCriticalSection
IsBadReadPtr
IsBadWritePtr
LocalReAlloc
CompareFileTime
GetCommConfig
ReplaceFileW
SetFileAttributesW
UnmapViewOfFile
VirtualProtectEx
lstrcatW
lstrlenA
GetBinaryTypeA
FindFirstVolumeMountPointW
ExpandEnvironmentStringsW
ExitProcess
EnumDateFormatsExW
EnumDateFormatsExA
ReadFileEx
CreateJobObjectW
AddConsoleAliasW
Module32FirstW

ntdll

RtlInitString
RtlDestroyEnvironment

ole32

CoGetClassVersion
CoRegisterMallocSpy
CoTaskMemRealloc
OleCreateLinkToFile
StgCreateDocfile
CLSIDFromProgIDEx

advapi32

RegDeleteKeyA

imm32

ImmEnumInputContext
ImmGetVirtualKey
ImmIsIME
ImmReSizeIMCC
ImmReleaseContext
ImmUnregisterWordA
ImmGetCompositionFontW

oleaut32

VariantCopyInd
VarDecNeg
VarDateFromDec
VarCyFromDec
SysStringLen
SafeArrayGetElemsize

Exports

Exports

EnumFileInItemRelease
FreeIsoItemTree
SetOption

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4765ead1731c2abb6506616800429e5c

Headers

File Characteristics

Imports

comctl32

kernel32

ntdll

ole32

advapi32

imm32

oleaut32

Exports

Exports

Sections

.text Size: 164KB - Virtual size: 164KB

.data Size: 72KB - Virtual size: 112KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 164KB - Virtual size: 164KB

.data
Size: 72KB - Virtual size: 112KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB