18d30ee2ef3c064c75fc858794802fd812002695ad59177e9fcf4f9ee374b1e8

Sharing

Copy URL Twitter E-mail

General

Target

18d30ee2ef3c064c75fc858794802fd812002695ad59177e9fcf4f9ee374b1e8
Size

468KB
MD5

cad9eaad98183a2692dab4f57e92277b
SHA1

91fd360a3ebcfb61f8509ab0878ae8a51cc98aac
SHA256

18d30ee2ef3c064c75fc858794802fd812002695ad59177e9fcf4f9ee374b1e8
SHA512

98b33e6bba818024968c4770ee4a4da1c768efd90998ba187c662f11de83ac47b1af10a62dc6fe45eac2dde10aad00e9df0f6ecf2500cc1ddfaccffd6219339b
SSDEEP

6144:+7mb2Pl6JPVy6hFj2BCoLkpYZRXbfQmwgOIuZm6uKKgmhVNuQ/W7ONtUJWoY:+7mbeYdzzpUkpYZhwbnPStW7ONtM

Score

N/A

Malware Config

Signatures

Files

18d30ee2ef3c064c75fc858794802fd812002695ad59177e9fcf4f9ee374b1e8
.dll windows x86

7497866c9ff5e2f0f3e584cc9932e108

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
GetShortPathNameA
GlobalLock
GlobalAlloc
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
RtlUnwind
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
HeapAlloc
GetProcAddress
HeapFree
GetLastError
CloseHandle
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InterlockedDecrement
InterlockedIncrement
SetFilePointer
SetStdHandle
FlushFileBuffers
CreateFileA
ReadFile
MultiByteToWideChar
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
LCMapStringA
LCMapStringW
SetEndOfFile

user32

MessageBoxA
GetFocus

opaparse

OpaParseSetRegions
OpaParseInit
OpaParse
OpaParseClose

Exports

Exports

AOCRAddStrip
AOCRAddWordToDic
AOCRClose
AOCRGatesToHtm
AOCRGatesToRtf
AOCRGatesToTxt
AOCRInit
AOCRParse
AOCRRecognize
AOCRRemoveWordFromDic
AOCRSetBlocks
AOCRSetup

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7497866c9ff5e2f0f3e584cc9932e108

Headers

File Characteristics

Imports

kernel32

user32

opaparse

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 144KB - Virtual size: 177KB

.rsrc Size: 104KB - Virtual size: 102KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 144KB - Virtual size: 177KB

.rsrc
Size: 104KB - Virtual size: 102KB

.reloc
Size: 24KB - Virtual size: 23KB