18865e182ba80f53389b9f92cf4de512a6c6579c2b874cc46d9c85d7dec63df5

Sharing

Copy URL Twitter E-mail

General

Target

18865e182ba80f53389b9f92cf4de512a6c6579c2b874cc46d9c85d7dec63df5
Size

61KB
MD5

515d4864a6fa00af54384039e6051ecb
SHA1

32f27aaf2006b0414a5ad04504e3dfa05bfec428
SHA256

18865e182ba80f53389b9f92cf4de512a6c6579c2b874cc46d9c85d7dec63df5
SHA512

503ef0ad9737ef607b10099352c2a29025970f0fe8654b981e8d52e094120c152ca80d848ce51ad64db73e94bd12835acb19503cb482cb9a31e8dfb5f54f3f67
SSDEEP

768:7AzrgeVIxuEDamy+WsUQVLSNiVdXXQOQy6LIBTMz4tl4+se5WEX5K9CD:7Azrg5am1NVL2iVdHQOhizShR5K9

Score

N/A

Malware Config

Signatures

Files

18865e182ba80f53389b9f92cf4de512a6c6579c2b874cc46d9c85d7dec63df5
.exe windows x86

79256057b91513dc7e33353b98510b3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmAssociateContextEx
ImmDisableIME
ImmShowSoftKeyboard
ImmGetCompositionFontA

kernel32

WideCharToMultiByte
MultiByteToWideChar
IsWow64Process
GetCurrentProcess
VirtualAlloc
Sleep
GetTickCount
FindClose
FindNextFileW
FindFirstFileW
lstrcatW
lstrcpyW
lstrlenW
CreateDirectoryW
GetTempFileNameW
GetTempPathW
ExitProcess
Wow64RevertWow64FsRedirection
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetCommandLineW
Wow64DisableWow64FsRedirection
GetSystemDirectoryW
CreateFileA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
CreateFileW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapAlloc
GetLastError
HeapFree
GetStartupInfoW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
ReadFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
RtlUnwind
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle

loadperf

LoadPerfCounterTextStringsA

wininet

SetUrlCacheEntryGroup
HttpEndRequestW

rtm

RtmBlockSetRouteEnable
MgmRegisterMProtocol

ole32

HACCEL_UserSize
OleLoad
CoInstall
CoInitialize
SNB_UserFree

winmm

joyGetThreshold
mmioWrite
midiStreamPause
mmioRenameA
midiInGetNumDevs

urlmon

WriteHitLogging
CoInternetCreateZoneManager

msacm32

acmFormatChooseW
acmStreamClose
acmFormatEnumA
acmFormatTagEnumA
acmDriverAddA

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79256057b91513dc7e33353b98510b3e

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

loadperf

wininet

rtm

ole32

winmm

urlmon

msacm32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 5KB - Virtual size: 12KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 5KB - Virtual size: 12KB

.reloc
Size: 4KB - Virtual size: 3KB