18fb9ba92c829739a8fc5caa6198a86f5e9f04593d881a9e36f1ea74f076fe63

Sharing

Copy URL Twitter E-mail

General

Target

18fb9ba92c829739a8fc5caa6198a86f5e9f04593d881a9e36f1ea74f076fe63
Size

141KB
MD5

2450d6e0e9da5420aed9fa67ba9770f3
SHA1

e980daa0c5ba31cbde691f933dbcc2c07c7c43c8
SHA256

18fb9ba92c829739a8fc5caa6198a86f5e9f04593d881a9e36f1ea74f076fe63
SHA512

22669c3006c5dd1d838481bc78f1fe575636d8b3d1dc41d4427c58c1a70f7ea154a287fe9c50c2d8ddbe89edcec0e89e18b7a9acfec21c3a1f941715dcea6b9e
SSDEEP

3072:BiyVSw+AJFHW2196MYxkOjDaQcUx2BfyYbMeTxNXSTldMqqDLy/7N:bwMFHW83ADvUJMONXSwqqDLu

Score

N/A

Malware Config

Signatures

Files

18fb9ba92c829739a8fc5caa6198a86f5e9f04593d881a9e36f1ea74f076fe63
.dll windows x86

07330b95b12c468e731252db5e34e8b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
WideCharToMultiByte
InterlockedDecrement
lstrlenA
lstrlenW
CreateFileA
GetACP
SetFileTime
MultiByteToWideChar
RaiseException
VirtualAlloc
GetProcessHeap
Sleep
GetFileAttributesA
ExpandEnvironmentStringsA
InterlockedCompareExchange
MoveFileExA
GetCurrentDirectoryA
InterlockedExchange
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
LoadLibraryA
HeapReAlloc
GetCPInfo
GetOEMCP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualProtect
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GlobalAlloc
FreeLibrary
GlobalFree
MulDiv
GlobalLock
GlobalUnlock
GetWindowsDirectoryW
LocalFree
SetCurrentDirectoryW
OutputDebugStringW
GetCommandLineA
DeleteFileA
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
RtlUnwind
GetVersionExA
VirtualQuery
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
WriteFile
GetSystemInfo

user32

InflateRect
SendMessageW
CopyRect
CharNextA
GetParent
PostMessageW
ReleaseCapture
OffsetRect
GetSysColor
GetClientRect

advapi32

RegQueryValueExW
RegSetValueW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyW

gdi32

CreateCompatibleDC
LPtoDP
GetDeviceCaps
GetEnhMetaFileBits
CreatePenIndirect
CreateFontIndirectW
GetViewportOrgEx
GetWindowOrgEx
Rectangle
EnumFontFamiliesW
GetTextMetricsW

ole32

CLSIDFromString
CoCreateInstance
CoGetMalloc

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07330b95b12c468e731252db5e34e8b6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

Sections

.text Size: 108KB - Virtual size: 108KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 59KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 108KB - Virtual size: 108KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 59KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB