18e1f6622158fea5602ea2fd85ed0990

Sharing

Copy URL Twitter E-mail

General

Target

18e1f6622158fea5602ea2fd85ed0990
Size

28KB
MD5

18e1f6622158fea5602ea2fd85ed0990
SHA1

22630a1964f9651de2fb7128ed558711b31b7638
SHA256

73f84a73c9a1a1f5b333711658e2ba9ed1c26873d9228ca7572dc07a0f4d462d
SHA512

e01d34401406932ec523bb6823133ec6da875e9ffc3cf9f0d450f05163d08126026613f99815b29a8b04931024f14f2fa60e4d5c5005dcdae71cd503b4a7f23d
SSDEEP

192:38fembfqKm10tArwM3jrSunk7ZS0aLP066SjLTAPIRTvaP1oynrEwW8eVwDr0Yx:38UnwmPSP6P0yTUmTvk1ew1Eok7b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18e1f6622158fea5602ea2fd85ed0990

Files

18e1f6622158fea5602ea2fd85ed0990
.exe windows:4 windows x86 arch:x86

7583a43f118c5db5681cfea971977b57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
Sleep
WinExec
GlobalAlloc
lstrcpyA
LoadLibraryA
GetStartupInfoA
GetModuleHandleA
GlobalFree
FreeLibrary
lstrcpynA
lstrcatA
CloseHandle
GetCommandLineA
GetVersion
GetProcAddress

user32

RegisterClassA
LoadCursorA
LoadIconA
RegisterClassExA
CreateWindowExA
GetMessageA
IsDialogMessageA
LoadImageA
SendMessageA
CreatePopupMenu
AppendMenuA
GetCursorPos
TrackPopupMenu
DestroyMenu
CreateDialogParamA
SetCursor
GetWindowTextA
EndDialog
DestroyIcon
DefWindowProcA
GetDlgItem
SetWindowTextA
KillTimer
PostMessageA
PostQuitMessage
UpdateWindow
ShowWindow
SetTimer
DialogBoxParamA
wsprintfA
TranslateMessage
DispatchMessageA
MessageBoxA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueA
RegQueryValueExA

shell32

ShellExecuteA
Shell_NotifyIconA
ExtractIconA

rasapi32

RasHangUpA
RasEnumConnectionsA
RasDialA
RasGetConnectStatusA
RasDeleteEntryA
RasValidateEntryNameA
RasSetEntryPropertiesA
RasEnumDevicesA
RasGetErrorStringA

gdi32

CreateSolidBrush
SetBkColor

msvcrt

_strcmpi
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
setlocale
strstr
memset
strcpy
strchr
strlen
mbstowcs

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7583a43f118c5db5681cfea971977b57

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

rasapi32

gdi32

msvcrt

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 2KB