18c6e9cc8d7cda42a78c6b743418bbf8

Sharing

Copy URL

Twitter E-mail

General

Target

18c6e9cc8d7cda42a78c6b743418bbf8
Size

102KB
MD5

18c6e9cc8d7cda42a78c6b743418bbf8
SHA1

fe0d515ff2cd257dcb558186718508db59ac048e
SHA256

a0df8337e1316cb9b2c5f26fd61f7069beb951bf1e0fc97aff63be51290ab5c8
SHA512

51777105497333e6db3cfc268052020a68e4e58c5aed1783bb1907053c0bc21a337b5c4bc023574f5425f71afed97313fc11ae6d52186b6f1ee25fd84453777d
SSDEEP

1536:YNS8dJau+12Po9C3xWEn+LhfaSj4/PoaPao1xqbfyWe:4S2+1zCBJ+lfZU5P7KzyW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18c6e9cc8d7cda42a78c6b743418bbf8

Files

18c6e9cc8d7cda42a78c6b743418bbf8
.exe windows:4 windows x86 arch:x86

8413da8e3de694f79828b4b5121589e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumWindows
GetClientRect
GetCursorPos
SetWindowPos
EnableScrollBar
PostQuitMessage
DestroyWindow
GetDC
SendMessageW
RemoveMenu
MsgWaitForMultipleObjects
PeekMessageA
ActivateKeyboardLayout
GetWindowDC
LoadStringA
RedrawWindow
CreateIcon
SetPropA
GetKeyNameTextA
GetLastActivePopup
SetScrollPos
GetSystemMetrics
GetFocus
OpenClipboard
LoadKeyboardLayoutA
SetScrollRange
EnableMenuItem
GetMenuItemCount
EnumChildWindows
IsRectEmpty
SendMessageA
DeleteMenu
IsChild
DestroyCursor
SetForegroundWindow
RegisterWindowMessageA
IsDialogMessageW
LoadIconA
MoveWindow
GetCapture
SetParent
SetActiveWindow
CharToOemA
DrawEdge
MapVirtualKeyA
InsertMenuItemA
GetActiveWindow
GetDesktopWindow
PeekMessageW
GetWindowRect
WindowFromPoint
ScreenToClient
GetMenuState
GetScrollInfo
EqualRect
CallNextHookEx
SetClipboardData
LoadBitmapA
CharNextA
CharLowerA
SetWindowPlacement
AdjustWindowRectEx
SetCursor
DefWindowProcA
IsDialogMessageA
DefFrameProcA
CallWindowProcA
GetKeyboardState
SetMenu
IsWindow
GetIconInfo
PostMessageA
GetDCEx
GetScrollRange
InflateRect
CharLowerBuffA
CheckMenuItem
ClientToScreen
ChildWindowFromPoint
TrackPopupMenu
CharUpperBuffA
IsWindowEnabled
DrawTextA
ScrollWindow
DispatchMessageW
EnumThreadWindows
IsZoomed
GetSysColorBrush
GetForegroundWindow
DispatchMessageA
DestroyMenu
ShowOwnedPopups
PtInRect
MapWindowPoints
GetClassInfoA
GetMenuItemInfoA

kernel32

VirtualAllocEx
GetModuleHandleA
EnumCalendarInfoA
GetStartupInfoA
ExitProcess
GlobalAlloc
WaitForSingleObject
SetEndOfFile
FreeResource
SetLastError
lstrcmpA
FormatMessageA
LoadResource
GetCommandLineA
GetProcAddress
lstrcpyA
SetEvent

shell32

SHGetDesktopFolder
SHGetFolderPathA
Shell_NotifyIconA

version

VerFindFileA
GetFileVersionInfoSizeA

gdi32

GetDIBColorTable
SelectObject
GetPaletteEntries
GetRgnBox
CreateFontIndirectA
BitBlt
CreateBrushIndirect
GetDIBits

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8413da8e3de694f79828b4b5121589e9

Headers

File Characteristics

Imports

user32

kernel32

shell32

version

gdi32

Sections

.text Size: 27KB - Virtual size: 27KB

.tls Size: 67KB - Virtual size: 67KB

.idata Size: 3KB - Virtual size: 2KB

DATA Size: 2KB - Virtual size: 1KB

BSS Size: 1KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 27KB

.tls
Size: 67KB - Virtual size: 67KB

.idata
Size: 3KB - Virtual size: 2KB

DATA
Size: 2KB - Virtual size: 1KB

BSS
Size: 1KB - Virtual size: 1KB