18e12987812d27exeexeexeex[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

18e12987812d27exeexeexeex.exe
Size

392KB
MD5

18e12987812d271b0a10ee86b9c499f2
SHA1

a3e98a0f69b1be77fe5f34967a36cbc38203c83c
SHA256

19b22c73b6158c02bfc708c2783431fd2a329ba79cec4151c5ef560c652eef3f
SHA512

51008643d93828282238ebbf4cd477015888a4f5d989f61e819deffbdb373a8567e0a5d0e3f971b51b24ab76b3b1b5ee30302c4d5533e6216e322b1281ce7a0b
SSDEEP

6144:ZWXDOh6UpuUz8S2AHwB0VKu/bROYYsnox0bbV/HzTkNBkjrK5c7:wTc6U0+8gQBUOYYsNbbV/HXkNmuc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18e12987812d27exeexeexeex.exe

Files

18e12987812d27exeexeexeex.exe
.exe windows x86

86d2cd1d901fc063228120389f136354

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
GetSystemInfo
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
IsBadWritePtr
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
RtlUnwind
ExitProcess
GetStartupInfoW
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DeleteFileW
MoveFileW
WritePrivateProfileStringW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
TerminateProcess
LocalAlloc
GlobalFlags
lstrcmpiW
InterlockedDecrement
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcpyW
GetLocaleInfoW
MulDiv
SetLastError
lstrcpynW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
GetModuleHandleA
LoadLibraryA
lstrcatW
lstrcmpW
GetModuleHandleW
GetVersionExA
MultiByteToWideChar
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
SetThreadUILanguage
GetFullPathNameW
GetDynamicTimeZoneInformation
GetUserDefaultLocaleName
GetSystemDefaultLocaleName
LCIDToLocaleName
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalAlloc
GetCurrentProcess
Sleep
EnterCriticalSection
LeaveCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
FindNextFileW
GetUserDefaultUILanguage
LoadLibraryW
GetProcAddress
FreeLibrary
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetDiskFreeSpaceExW
GetModuleFileNameW
lstrlenW
GetVersionExW
GetTickCount
FindFirstFileW
FindClose
WideCharToMultiByte
WriteFile
ReadFile
GetLogicalDriveStringsW
GetDriveTypeW
CreateFileW
DeviceIoControl
CreateProcessW
GetLastError
WaitForSingleObject
GetExitCodeProcess
CloseHandle
FormatMessageW
LocalFree
OutputDebugStringW
GlobalReAlloc
VirtualQuery
HeapCreate

user32

MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
CopyAcceleratorTableW
SetRect
IsRectEmpty
CharNextW
CharUpperW
ReleaseCapture
SetCapture
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterClipboardFormatW
WinHelpW
GetCapture
CreateWindowExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
GetFocus
SetFocus
IsChild
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
PostMessageW
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
EqualRect
PostThreadMessageW
GetClassInfoW
RegisterClassW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
CopyRect
PtInRect
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetKeyboardLayoutNameW
UnregisterClassW
LoadCursorW
SetCursor
BroadcastSystemMessageW
GetSystemMetrics
LoadIconW
GetClientRect
GetWindowRect
IsIconic
GetSystemMenu
AppendMenuW
DrawIcon
RegisterWindowMessageW
MessageBoxW
wsprintfW
LoadStringW
SendMessageW
GetParent
EnableWindow
SetWindowsHookExW

gdi32

ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
GetRgnBox
GetTextColor
GetBkColor
GetMapMode
CreateRectRgnIndirect
GetDeviceCaps
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
CreatePatternBrush
CreateDIBSection
GetObjectW
DeleteObject
SetDIBColorTable
SelectObject
DeleteDC
CreateCompatibleDC
GetStockObject
CreateSolidBrush
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

LsaOpenPolicy
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyW
RegDeleteKeyW
CloseServiceHandle
QueryServiceStatus
ControlService
OpenServiceW
OpenSCManagerW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyExW
LsaNtStatusToWinError
LsaRetrievePrivateData
LsaFreeMemory
LsaClose
LogonUserW
RegGetValueW

shell32

ord680

comctl32

ord17

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
StrStrIW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

VariantCopy
SysFreeString
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdiplusStartup
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdiplusShutdown
GdipFree
GdipGetImageGraphicsContext
GdipDrawImageI
GdipGetImagePalette
GdipCloneImage
GdipAlloc

Sections

.text
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86d2cd1d901fc063228120389f136354

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

Sections

.text Size: 184KB - Virtual size: 182KB

.rdata Size: 56KB - Virtual size: 53KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 136KB - Virtual size: 134KB

.text
Size: 184KB - Virtual size: 182KB

.rdata
Size: 56KB - Virtual size: 53KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 136KB - Virtual size: 134KB