18a4141c8a467bf2f8cc274672daa87d

Sharing

Copy URL Twitter E-mail

General

Target
18a4141c8a467bf2f8cc274672daa87d
Size 37KB
Sample231224-28ca3sceh8
SHA256 59c323b082e86f8a36501ecc2aa5dbb1df7c0399bff58825ff1cb245cd4b8573
MD5 18a4141c8a467bf2f8cc274672daa87d
SHA1 112fec90a83dff00748ca92fa069be8ec8e7cf2e
SHA512 8980a87643ce9a4bf79ced189de78dc931c8cc0845124cf2d5205ae41a855051b50a91f28641915bc96cf670e1e56e649ce65776cb64efc2361aa62497157af5
SSDEEP 768:BHLNNwWBcaXbpzA6w/4I2NQPx57uQdUikbvlVObXYTRyX5:pv/eaaz2KH7ugUTP9TRc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18a4141c8a467bf2f8cc274672daa87d

File Explorer

18a4141c8a467bf2f8cc274672daa87d

.dll 37KB

18a4141c8a467bf2f8cc274672daa87d

IMPHASH 21b964fc766a1883744d87ecd8a221d6
SHA256 59c323b082e86f8a36501ecc2aa5dbb1df7c0399bff58825ff1cb245cd4b8573
MD5 18a4141c8a467bf2f8cc274672daa87d
SHA1 112fec90a83dff00748ca92fa069be8ec8e7cf2e
SHA512 8980a87643ce9a4bf79ced189de78dc931c8cc0845124cf2d5205ae41a855051b50a91f28641915bc96cf670e1e56e649ce65776cb64efc2361aa62497157af5
SSDEEP 768:BHLNNwWBcaXbpzA6w/4I2NQPx57uQdUikbvlVObXYTRyX5:pv/eaaz2KH7ugUTP9TRc
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

DeleteFileA MultiByteToWideChar GetSystemDirectoryA WaitForSingleObject ReadFile GetFileSize SetFilePointer GetLastError CreateEventA GetTempPathA GetWindowsDirectoryA GlobalLock SetFileAttributesA GetCommandLineA CreateMutexA CreateFileA WriteFile GlobalUnlock GlobalFree GlobalAlloc CreateThread CloseHandle IsBadReadPtr GetCurrentDirectoryA GetPrivateProfileStringA Sleep GetModuleFileNameA WinExec ExitProcess LoadLibraryA GetProcAddress VirtualProtect

user32

GetParent GetWindowThreadProcessId ReleaseDC EnumWindows wsprintfA GetWindowTextA GetWindowRect GetDC GetDesktopWindow GetClientRect CallWindowProcA GetClassNameA SetWindowLongA RegisterShellHookWindow RegisterWindowMessageA

gdi32

CreateDCA GetDeviceCaps DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetDIBits RealizePalette SelectPalette GetStockObject GetObjectA DeleteDC

gdiplus

GdipCloneImage GdipAlloc GdipFree GdipGetImageEncodersSize GdipGetImageEncoders GdiplusStartup GdipSaveImageToFile GdiplusShutdown GdipLoadImageFromFile GdipDisposeImage

msvcp60

??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ

ws2_32

inet_ntoa send recv socket inet_addr htons connect closesocket gethostbyname WSACleanup WSAStartup

wininet

InternetOpenA InternetReadFile InternetOpenUrlA InternetCloseHandle

msvcrt

_access strrchr strncpy abs malloc wcscmp free __dllonexit _initterm _adjust_fdiv _getpid _itoa _stricmp _strlwr _strrev _onexit ??2@YAPAXI@Z __CxxFrameHandler strcmp memcmp memset strchr atoi sprintf strlen strstr strcpy strcat memcpy

netapi32

Netbios

Sharing

General

Malware Config

Signatures

File Explorer

18a4141c8a467bf2f8cc274672daa87d

kernel32

user32

gdi32

gdiplus

msvcp60

ws2_32

wininet

msvcrt

netapi32

generic