18fa5063a02d00edfb388092126dc20923681701b6fe0c3bd1759dcd9e2daf3f

Sharing

Copy URL Twitter E-mail

General

Target

18fa5063a02d00edfb388092126dc20923681701b6fe0c3bd1759dcd9e2daf3f
Size

103KB
MD5

0288cef9c23fa6d57fd168038a531af0
SHA1

ea1d2710657642536229f45d36b43eb1ddf14bf5
SHA256

18fa5063a02d00edfb388092126dc20923681701b6fe0c3bd1759dcd9e2daf3f
SHA512

6932fa4b86b51088c9098dddee96cb2b58589e10988c100821984a57948bc9ca15a8dabe174b2af432fc0349b310f2c95baa1d2a4e44e885619a3e6dedf63dcb
SSDEEP

1536:+dO1ylM1tMuoQPpjWwnO9KF9i074w1isQY8ptGTb82ong3pbj6Ll1IdOUroqu/s7:+daVPpjSyYsQYrwngcLIu0xW8j7

Score

N/A

Malware Config

Signatures

Files

18fa5063a02d00edfb388092126dc20923681701b6fe0c3bd1759dcd9e2daf3f
.exe windows x86

3b1897630f29b7be011258d987a1f399

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fputc
_XcptFilter
memcpy
__p__fmode
fflush
sqrt
strchr
_controlfp
_exit
__p___initenv
free
_initterm
_except_handler3
__setusermatherr
__p__environ
calloc
_adjust_fdiv
__p__commode
signal
exit
__getmainargs
fopen
_errno
__set_app_type
strcpy

comdlg32

GetOpenFileNameA

kernel32

GetLocaleInfoA
GetSystemDefaultLCID
IsValidCodePage
CreateProcessW
GetStartupInfoW
GetFileAttributesW
lstrcmpiW
lstrcpyA
GetNumberFormatA
GetDriveTypeA
SetStdHandle
FreeEnvironmentStringsA
GetTimeZoneInformation
InterlockedCompareExchange
SetFileAttributesW
VirtualProtectEx
GetSystemTime
InterlockedExchange
CopyFileA

user32

RegisterWindowMessageA
ShowCursor
PeekMessageA
DispatchMessageA
EndPaint
CreatePopupMenu
MessageBoxA
DialogBoxParamA
IsZoomed
ReleaseCapture
GetMessagePos
ScreenToClient
SetDlgItemTextA
FrameRect
SetClipboardData

advapi32

ControlService
RegOpenKeyW
RegSetValueExW
OpenServiceW
RegEnumValueA
InitializeAcl
GetSecurityDescriptorDacl
OpenSCManagerA
CryptDestroyHash
RegEnumKeyExW
DeregisterEventSource
RegQueryValueExW
RegDeleteKeyA
CryptAcquireContextA

ole32

CreateItemMoniker
CoInitializeEx
CLSIDFromString
ProgIDFromCLSID
OleSetClipboard
ReleaseStgMedium
StgCreateDocfileOnILockBytes

comctl32

ImageList_DrawEx
CreateToolbarEx
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Add
ImageList_LoadImageA
ImageList_Create
ImageList_Remove

gdi32

GetCharWidthW
RealizePalette
GetObjectA
CreateMetaFileW
CreateDCW
Arc
SelectClipRgn
CreateFontIndirectW
SetROP2
RectInRegion
CreateRectRgn
SetMapMode
PolyBezierTo
GetMapMode
GetEnhMetaFileHeader

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3b1897630f29b7be011258d987a1f399

Headers

File Characteristics

Imports

msvcrt

comdlg32

kernel32

user32

advapi32

ole32

comctl32

gdi32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 9KB - Virtual size: 48KB

.rsrc Size: 23KB - Virtual size: 96KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 9KB - Virtual size: 48KB

.rsrc
Size: 23KB - Virtual size: 96KB