MalwareBazaar[.]18

resource
MalwareBazaar.18

MalwareBazaar.18

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 d09e5aa4e74c009e6ec6b80ff7fe4da43eeb4640104c54036f40755f55767118
MD5 f37e27368c12a73dc8e791a1a60c929f
SHA1 3f1f1592e70c46c77fdf603ec4e61fc5a179d6b2
SHA512 cc48246815db140cb0f1d500f8ed2983800b42d39b606a3c4319c1a026ba88930f585815851653bae99b950466785447866e70ecad92b9a7677fb8f876cba0ae
SSDEEP 12288:HVPU0RvjvT4yLgy7saE7nCsV20XPB1IpBt7Kwcjoj:HlU0RvjvTDqNjFcYcBIwyu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13164

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

Occludes.Val

SHA256 67331c7fc28892a12285dc6c743f0cc17202d877dd3dfef98f303d5e4931b47f
MD5 354986163506958a2c23c1a4f4151d89
SHA1 5b3d245fb9f4010e8d712185e71144242128e154
SHA512 ed5b03b5c5c703512a0529e6699f32f26056a16fc083732ec1d991974aa4bb4297b4cf61f2be880e1278e6b0ca5d42cae82b057fd162f043e8b37c82188b2c7a
SSDEEP 6144:rmOXPz/r6MERLxtNM95Wlig6wpd7qpIBbmFF2+Pt9wC9NSXpreiFq5eP4mJ5g8CB:rmkPJYtC9MlQ+0Fxtr9Napq5eg+SHbS0
MD5 SHA1 SHA512 SSDEEP

biogeografien.tim

SHA256 16540e47bef0a3e31d663460a583695e518c2570d4bc2579d8b6a5581c384ab7
MD5 104c01e1ebabbc553264ef1f07c3f94a
SHA1 12fe59a71567aafb9d6bcd4289e2a3b715bca662
SHA512 59fb9fe08ff768fb64d50e6705cb69dce12a6d9dc48e440bac87bf369c1ab0521274a9a777affcc0141310c07ff70c92a85e5cb3210c1996f3136d4ebb853aa5
MD5 SHA1 SHA512

discoast.und

SHA256 ec25ed855101ec13fda9bf0af3f955ae40226d0d109f83cd54431146f2cb923a
MD5 ed33a4c44fa9c5b922f293558a592c32
SHA1 0705702432d82932fe0343485582ba1098c59d19
SHA512 e8261eb9bbef22624090e4673bc642ba3101458c25806117dddcedebd427f8eb7a5713e15646be1aafa8f67c726794fcfb62108ee09b286430c0dc3bb0867c39
MD5 SHA1 SHA512

metaphonize.txt

SHA256 b70bae0187e0b9427a6469a12418a81cfe9ad167b83eed284cc80c72ca525638
MD5 928976dad5d8d2c3ba95c5c6289673a8
SHA1 f6b4fd683ff8a7200df35ec0a850a1fca32069e6
SHA512 2475a43af3651c155cfa6013dcd8df12e208eb6b28b76f9cbc5483b99a17d139fba517d98f7c6d3d62d548a9128752a65cf5fde045a75d64ab053ecf15b12b54
MD5 SHA1 SHA512

pocherende.Wis

SHA256 52bc104bebbbd54b1c166aefe4a190538bd0814ba44960cc5f2e57cad5f03028
MD5 bacc6918d2f4459cb9d64c70e3c4769d
SHA1 a203ec62f9c491f0dedba0d1771fdd83d926cc45
SHA512 3495221b21f184c34d4218169ec71ea86f2dfb1b7c7bd94acf5e737f19944992dd65df8083299fb3989ad5c29bc7b6448d8537fd170a358edd696a629fdea735
SSDEEP 768:+hDI0UZjPkXJ+Wzu5O9Q2EzfUAgzgxmw0OSJlj2Xh7oly6aSM2eF+P17vYmlIya1:kDIxsJJufjegfqpmh7XhlNS2mtKH
MD5 SHA1 SHA512 SSDEEP

religionsfrihedens.dep

SHA256 0bef30e5dbaf3911a5814bd0de50ba9de0462070043bc0663b37183d9353c117
MD5 1b8e67f5637845f81c313ed069765a04
SHA1 7f356dd97ae03c0b4d864964863846b3d190ea14
SHA512 f632b75ce45be9c7be43a8fe514d391b72c955a828c7da72ee6e9b1764f88cc4084a19d53d9aa1773e0564c2099f6a6ec3485a6ffe3b077436b34e03e4c56fb9
MD5 SHA1 SHA512

scriveners.unn

SHA256 54833f0fd07260468044e7bb1cf435b4beae5f9e4f3c51d775f1af23f45a97a6
MD5 750de71ea8facd8f0fc8d57c0f86a967
SHA1 256805fdae24dd369adbe3cf63f272bde8246eb5
SHA512 2106928d0cf2b85d86c8392b96122d6643abdd0d36eb0f7ea847dd648191462e9d2c5e64384ec4be89883804412ee2ea2f9e054fb90bb3e720b81c93ff4816e2
SSDEEP 192:QS04I1W2W+1yaUcHuKoI6C+DolkCnDVMZyVvDdzco36hky1Ck+W:QS04Il0cOKozFmkC5MZyBDD6hkyok+W
MD5 SHA1 SHA512 SSDEEP

smygedes.exa

SHA256 a2f4aefd14acae970afc7c6f0e11c550a5c8f34640e11875dbc0808286b91109
MD5 defaa5ed62729346d26842567e2a763f
SHA1 a189481e3c8cb7a94b07748cb4189c182fafde77
SHA512 4a9d45d0c750c6121293723dcacb3df6ba82e13c8fda7d8bec7846dbacaa57fade25b65b14dd5441fdad65db5cd148f5d859ed265607fbf31cabd1503901f0fe
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer