18f24841651461bd84a5eac08be9bce9eab54b133b0e837d5298dac44e199d5f

Sharing

Copy URL

Twitter E-mail

General

Target

18f24841651461bd84a5eac08be9bce9eab54b133b0e837d5298dac44e199d5f
Size

1.4MB
MD5

28267ea322e3975f1e98c64a1c77f509
SHA1

e1d92e085df142d703ed9fd9c65ed92562a759fa
SHA256

18f24841651461bd84a5eac08be9bce9eab54b133b0e837d5298dac44e199d5f
SHA512

2c0bd061a51e48c057fdd0b05dc959c48e79ef3df3ca1abec105b8be2aa53f416f92c109c23029a11d4d3e7e75529215877d41b5bfe5d462d844b3bae29c1a42
SSDEEP

24576:bSOCJ+Kt7ADfN0l6GMwF5fdn17nlz/Nz/9z/8z/Uz/Nz/Oz/aVuADDePddFkEPSr:JtTGIwloSpeQiMcRc/s+kobXnz/q/xnQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18f24841651461bd84a5eac08be9bce9eab54b133b0e837d5298dac44e199d5f

Files

18f24841651461bd84a5eac08be9bce9eab54b133b0e837d5298dac44e199d5f
.dll windows:6 windows x86 arch:x86

b33d932400c0202505a3d501979ffa5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
OpenEventA
FreeLibrary
GetProcAddress
LoadLibraryA
OutputDebugStringW
CreateFileW
GetFileSizeEx
ReadFile
SetFilePointer
SetFilePointerEx
WriteFile
CloseHandle
SetErrorMode
GetTickCount
GetModuleFileNameW
GetModuleHandleW
SetThreadExecutionState
GetCurrentProcess
ExitProcess
TerminateProcess
GlobalMemoryStatusEx
GetSystemInfo
CreateDirectoryW
GetLastError
LoadLibraryW
lstrcatW
lstrlenW
CreateToolhelp32Snapshot
Process32First
Process32Next
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObjectEx
GetEnvironmentVariableA
SetEnvironmentVariableA
IsDebuggerPresent
RaiseException
CreateThread
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
VerSetConditionMask
FormatMessageW
VerifyVersionInfoW
GlobalAlloc
GlobalUnlock
GlobalLock
CompareStringA
MulDiv
CreateEventW
WaitForSingleObject
WideCharToMultiByte
GetSystemPowerStatus
GetLocaleInfoA
CreateFileA
DeviceIoControl
GetOverlappedResult
CancelIo
ResetEvent
CreateEventA
LocalFree
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
RtlUnwind
InterlockedFlushSList
SetLastError
EncodePointer
TlsFree
LoadLibraryExW
GetModuleHandleExW
SetConsoleCtrlHandler
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
HeapReAlloc
DecodePointer
FlushFileBuffers
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
GetStringTypeW
HeapSize
SetEndOfFile
WriteConsoleW
CreateSemaphoreW
DisableThreadLibraryCalls

shell32

SHGetFolderPathW
DragAcceptFiles
SHGetKnownFolderPath
ShellExecuteW
ExtractIconExW
DragFinish
DragQueryFileW

ole32

CoUninitialize
CoTaskMemFree
CoInitialize
CoInitializeEx
CoCreateInstance
PropVariantClear

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

imm32

ImmGetContext
ImmSetCompositionWindow
ImmNotifyIME
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetIMEFileNameA

winmm

waveOutClose
waveOutOpen
waveOutGetErrorTextW
waveOutGetDevCapsW
waveOutGetNumDevs
timeEndPeriod
waveOutUnprepareHeader
timeGetTime
waveOutPrepareHeader
waveOutWrite
waveInOpen
waveInClose
waveInPrepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveOutReset
waveInGetNumDevs
timeBeginPeriod
waveInReset
waveInStart
waveInGetDevCapsW

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInterfaces
SetupDiEnumDeviceInfo
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList

urlmon

URLDownloadToFileW

user32

AdjustWindowRectEx
SetCursor
GetCursorPos
GetClipCursor
ClientToScreen
ScreenToClient
WindowFromPoint
ClipCursor
IsRectEmpty
GetWindowLongW
LoadIconW
DestroyIcon
GetRawInputData
GetDoubleClickTime
OpenClipboard
CloseClipboard
GetClipboardSequenceNumber
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetKeyboardLayout
GetKeyboardState
ToUnicode
MapVirtualKeyW
GetDC
ReleaseDC
ChangeDisplaySettingsExW
EnumDisplaySettingsW
EnumDisplayDevicesW
GetMonitorInfoW
EnumDisplayMonitors
TrackMouseEvent
SendMessageW
RegisterClassW
CreateWindowExW
DestroyWindow
ShowWindow
SetLayeredWindowAttributes
GetClientRect
GetFocus
SetForegroundWindow
SetPropW
RemovePropW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
PtInRect
SetWindowLongW
GetParent
CreateIconFromResource
SetWindowRgn
SetCursorPos
LoadCursorW
CreateIconIndirect
RegisterRawInputDevices
GetDesktopWindow
RegisterDeviceNotificationW
UnregisterDeviceNotification
UnregisterClassA
RegisterClassExA
CreateWindowExA
GetMessageW
PostThreadMessageW
SetTimer
KillTimer
PostMessageW
DialogBoxIndirectParamW
EndDialog
GetDlgItem
SetFocus
DrawTextW
SystemParametersInfoA
SystemParametersInfoW
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetPropW
DispatchMessageW
TranslateMessage
MessageBoxA
ValidateRect
InvalidateRect
GetUpdateRect
GetMenu
GetSystemMetrics
GetAsyncKeyState
GetKeyState
IsIconic
IsWindowVisible
GetWindowRect
GetClassInfoExW
RegisterClassExW
UnregisterClassW
CallWindowProcW
DefWindowProcW
GetMessageExtraInfo
SetWindowPos
PeekMessageW

gdi32

DeleteObject
SelectObject
DeleteDC
CreateDIBSection
CreateCompatibleBitmap
CreateDCW
GetDeviceCaps
GetDIBits
GetDeviceGammaRamp
SetDeviceGammaRamp
CombineRgn
CreateCompatibleDC
CreateRectRgn
GetTextMetricsW
GetTextExtentPoint32A
CreateFontIndirectW
BitBlt
SwapBuffers
SetPixelFormat
GetPixelFormat
DescribePixelFormat
ChoosePixelFormat
CreateBitmap

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW

oleaut32

SysFreeString

Exports

Exports

FInstance

Sections

.text
Size: 959KB - Virtual size: 959KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b33d932400c0202505a3d501979ffa5e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

ole32

version

imm32

winmm

setupapi

urlmon

user32

gdi32

advapi32

oleaut32

Exports

Exports

Sections

.text Size: 959KB - Virtual size: 959KB

.rdata Size: 267KB - Virtual size: 267KB

.data Size: 18KB - Virtual size: 27KB

.rsrc Size: 183KB - Virtual size: 182KB

.reloc Size: 44KB - Virtual size: 43KB

.text
Size: 959KB - Virtual size: 959KB

.rdata
Size: 267KB - Virtual size: 267KB

.data
Size: 18KB - Virtual size: 27KB

.rsrc
Size: 183KB - Virtual size: 182KB

.reloc
Size: 44KB - Virtual size: 43KB