18ecb438e8fd4f0aff7318a27e14d6b251d9337663bd6fd1a52280cf0f1f24a1

Sharing

Copy URL Twitter E-mail

General

Target

18ecb438e8fd4f0aff7318a27e14d6b251d9337663bd6fd1a52280cf0f1f24a1
Size

252KB
MD5

3b162258a5016a32c0fd9a91e7ed5e21
SHA1

88a700313b247b33a0487260b1b9b20352096bc7
SHA256

18ecb438e8fd4f0aff7318a27e14d6b251d9337663bd6fd1a52280cf0f1f24a1
SHA512

62fa6adc19fcdce10404d542faf840daedc60a5a1c73b86ddc70963f4e652cd045050347d49d672738050d0e4e76a5a0e06e7dc276614cd108fc7d344bd2f284
SSDEEP

1536:s3CaZyS1tmTHLQxR5gPJIxyU11Du7rCWvuQvVgI5A0WRilTIfDEt9n/58tyW4KwR:sya8dsEANLW2ocRQI+9/546KwIsUSw0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18ecb438e8fd4f0aff7318a27e14d6b251d9337663bd6fd1a52280cf0f1f24a1

Files

18ecb438e8fd4f0aff7318a27e14d6b251d9337663bd6fd1a52280cf0f1f24a1
.exe windows:5 windows x86

e973aba4424d4cbac463350d8e7d7e05

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleA
InterlockedDecrement
SetDefaultCommConfigW
GetEnvironmentStringsW
GetUserDefaultLCID
SetConsoleScreenBufferSize
AddConsoleAliasW
SetVolumeMountPointW
GetModuleHandleW
GetCommConfig
GetConsoleAliasesLengthA
SetFileTime
GetConsoleAliasExesW
GetCommandLineA
GetDriveTypeA
GetEnvironmentStrings
LoadLibraryW
TerminateThread
FatalAppExitW
ReadConsoleInputA
CopyFileW
SetConsoleCP
EnumSystemCodePagesA
GetACP
GetVolumePathNameA
GetStartupInfoW
MoveFileExW
GetPrivateProfileIntW
FindFirstFileA
GetLastError
GetCurrentDirectoryW
SetLastError
LoadLibraryA
OpenMutexA
GetProcessId
LocalAlloc
GetFileType
GetNumberFormatW
RemoveDirectoryW
GetProfileStringA
GetModuleHandleA
FreeEnvironmentStringsW
EnumResourceNamesA
FindNextFileW
VirtualProtect
GetCurrentDirectoryA
EnumDateFormatsW
GetShortPathNameW
OpenSemaphoreW
FindFirstVolumeA
FindAtomW
GetWindowsDirectoryW
SetStdHandle
WriteConsoleW
FindFirstFileW
GetComputerNameA
CreateJobObjectA
GetCommandLineW
CloseHandle
CreateFileW
MoveFileA
HeapFree
HeapAlloc
GetProcAddress
ExitProcess
DecodePointer
EncodePointer
HeapSetInformation
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
Sleep
HeapSize
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
GetCPInfo
GetOEMCP
IsValidCodePage
RtlUnwind
HeapReAlloc
IsProcessorFeaturePresent
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer

user32

CharUpperW

gdi32

SelectPalette
GetTextFaceW
GetCharWidthA

shell32

DragFinish

winhttp

WinHttpGetProxyForUrl

Sections

.text
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e973aba4424d4cbac463350d8e7d7e05

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

winhttp

Sections

.text Size: 193KB - Virtual size: 193KB

.data Size: 16KB - Virtual size: 2.8MB

.rsrc Size: 42KB - Virtual size: 41KB

.text
Size: 193KB - Virtual size: 193KB

.data
Size: 16KB - Virtual size: 2.8MB

.rsrc
Size: 42KB - Virtual size: 41KB