18e5aa3ca847686056f703a625beacc7ec059438632ac384a98c799097c0d069

Sharing

Copy URL Twitter E-mail

General

Target

18e5aa3ca847686056f703a625beacc7ec059438632ac384a98c799097c0d069
Size

221KB
MD5

8dcd8105d2a596ea3541c6d4d83b5135
SHA1

e1ffeae17f2efc761d4b596d1276f5d7a9152e5a
SHA256

18e5aa3ca847686056f703a625beacc7ec059438632ac384a98c799097c0d069
SHA512

46545afa782c51ea3806cf63a07c0ef774b80f1cc1a0601d0987c442f1d4dde2f9a335f646656d735b3445806acac5821bcc17ea00559244bd6267393be7b0e2
SSDEEP

3072:5qADvw24VKsU4qpk3d3oRKrSfIvTP2iM:5qArw24AfrpqrTP2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18e5aa3ca847686056f703a625beacc7ec059438632ac384a98c799097c0d069

Files

18e5aa3ca847686056f703a625beacc7ec059438632ac384a98c799097c0d069
.dll windows:6 windows x64 arch:x64

5f4d5ed633fe1be66f89d5b637be70c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
SetThreadExecutionState
IsDebuggerPresent
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LeaveCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
FormatMessageW
GetModuleHandleW
GetLastError
VerSetConditionMask
LoadLibraryA
GetProcAddress
InitializeSListHead
FreeLibrary

user32

SetWindowPos
IsWindowVisible
IsIconic
BringWindowToTop
IsZoomed
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
SetFocus
GetActiveWindow
GetKeyState
GetAsyncKeyState
SetCapture
ReleaseCapture
MsgWaitForMultipleObjects
GetSystemMetrics
SetForegroundWindow
RedrawWindow
SetPropW
GetPropW
RemovePropW
SetWindowTextW
GetClientRect
GetWindowRect
AdjustWindowRectEx
SetCursorPos
SetCursor
MoveWindow
DefWindowProcW
ScreenToClient
WindowFromPoint
ClipCursor
SetRect
PtInRect
GetWindowLongW
SetWindowLongW
GetClassLongPtrW
LoadCursorW
DestroyIcon
LoadImageW
CreateIconIndirect
MonitorFromWindow
GetRawInputData
RegisterRawInputDevices
FlashWindow
WaitMessage
PostMessageW
SendMessageW
GetMessageTime
TrackMouseEvent
EnumDisplayMonitors
GetMonitorInfoW
EnumDisplayDevicesW
EnumDisplaySettingsExW
EnumDisplaySettingsW
ChangeDisplaySettingsExW
ReleaseDC
GetDC
GetRawInputDeviceList
SetLayeredWindowAttributes
GetLayeredWindowAttributes
RegisterClassExW
GetCursorPos
UnregisterClassW
TranslateMessage
DispatchMessageW
PeekMessageW
RegisterDeviceNotificationW
UnregisterDeviceNotification
CreateWindowExW
DestroyWindow
ShowWindow
ToUnicode
MapVirtualKeyW
SystemParametersInfoW
GetRawInputDeviceInfoA
ClientToScreen

gdi32

CreateDCW
GetDeviceCaps
GetDeviceGammaRamp
SetDeviceGammaRamp
CreateBitmap
CreateRectRgn
DeleteObject
CreateDIBSection
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
SwapBuffers
DeleteDC

shell32

DragQueryPoint
DragQueryFileW
DragFinish
DragAcceptFiles

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memmove
memcpy
strstr
memset

api-ms-win-crt-string-l1-1-0

strcmp
strspn
strncpy
strcspn
strncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

calloc
realloc
free

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

powf

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table
_initterm
_initialize_narrow_environment
_initterm_e
_cexit

Exports

Exports

glfwCreateCursor
glfwCreateStandardCursor
glfwCreateWindow
glfwCreateWindowEx
glfwCreateWindowSurface
glfwDefaultWindowHints
glfwDestroyCursor
glfwDestroyWindow
glfwExtensionSupported
glfwFocusWindow
glfwGetClipboardString
glfwGetCurrentContext
glfwGetCursorPos
glfwGetEGLContext
glfwGetEGLDisplay
glfwGetEGLSurface
glfwGetError
glfwGetFramebufferSize
glfwGetGamepadName
glfwGetGamepadState
glfwGetGammaRamp
glfwGetInputMode
glfwGetInstanceProcAddress
glfwGetJoystickAxes
glfwGetJoystickButtons
glfwGetJoystickGUID
glfwGetJoystickHats
glfwGetJoystickName
glfwGetJoystickUserPointer
glfwGetKey
glfwGetKeyName
glfwGetKeyScancode
glfwGetMonitorContentScale
glfwGetMonitorName
glfwGetMonitorPhysicalSize
glfwGetMonitorPos
glfwGetMonitorUserPointer
glfwGetMonitorWorkarea
glfwGetMonitors
glfwGetMouseButton
glfwGetOSMesaColorBuffer
glfwGetOSMesaContext
glfwGetOSMesaDepthBuffer
glfwGetPhysicalDevicePresentationSupport
glfwGetPrimaryMonitor
glfwGetProcAddress
glfwGetRequiredInstanceExtensions
glfwGetTime
glfwGetTimerFrequency
glfwGetTimerValue
glfwGetVersion
glfwGetVersionString
glfwGetVideoMode
glfwGetVideoModes
glfwGetWGLContext
glfwGetWin32Adapter
glfwGetWin32Monitor
glfwGetWin32Window
glfwGetWindowAttrib
glfwGetWindowContentScale
glfwGetWindowFrameSize
glfwGetWindowMonitor
glfwGetWindowOpacity
glfwGetWindowPos
glfwGetWindowSize
glfwGetWindowUserPointer
glfwHideWindow
glfwIconifyWindow
glfwInit
glfwInitHint
glfwJoystickIsGamepad
glfwJoystickPresent
glfwMakeContextCurrent
glfwMaximizeWindow
glfwPollEvents
glfwPostEmptyEvent
glfwRawMouseMotionSupported
glfwRequestWindowAttention
glfwRestoreWindow
glfwSetCharCallback
glfwSetCharModsCallback
glfwSetClipboardString
glfwSetCursor
glfwSetCursorEnterCallback
glfwSetCursorPos
glfwSetCursorPosCallback
glfwSetDropCallback
glfwSetErrorCallback
glfwSetFramebufferSizeCallback
glfwSetGamma
glfwSetGammaRamp
glfwSetInputMode
glfwSetJoystickCallback
glfwSetJoystickUserPointer
glfwSetKeyCallback
glfwSetMonitorCallback
glfwSetMonitorUserPointer
glfwSetMouseButtonCallback
glfwSetScrollCallback
glfwSetTime
glfwSetWindowAspectRatio
glfwSetWindowAttrib
glfwSetWindowCloseCallback
glfwSetWindowContentScaleCallback
glfwSetWindowFocusCallback
glfwSetWindowIcon
glfwSetWindowIconifyCallback
glfwSetWindowMaximizeCallback
glfwSetWindowMonitor
glfwSetWindowOpacity
glfwSetWindowPos
glfwSetWindowPosCallback
glfwSetWindowRefreshCallback
glfwSetWindowShouldClose
glfwSetWindowSize
glfwSetWindowSizeCallback
glfwSetWindowSizeLimits
glfwSetWindowTitle
glfwSetWindowUserPointer
glfwShowWindow
glfwSwapBuffers
glfwSwapInterval
glfwTerminate
glfwUpdateGamepadMappings
glfwVulkanSupported
glfwWaitEvents
glfwWaitEventsTimeout
glfwWindowHint
glfwWindowHintString
glfwWindowShouldClose

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f4d5ed633fe1be66f89d5b637be70c1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 68KB

.rdata Size: 140KB - Virtual size: 139KB

.data Size: 4KB - Virtual size: 14KB

.pdata Size: 5KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 900B

.text
Size: 69KB - Virtual size: 68KB

.rdata
Size: 140KB - Virtual size: 139KB

.data
Size: 4KB - Virtual size: 14KB

.pdata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 900B