96ecc21946088520e6e4f0a2bcf6be57b6493250bb29fbec3dc00606824fa01a

Sharing

Copy URL Twitter E-mail

General

Target

96ecc21946088520e6e4f0a2bcf6be57b6493250bb29fbec3dc00606824fa01a
Size

277KB
MD5

041596372b788469301cf67f59077ad0
SHA1

9572f5fb8fec4ac87e7f815c976c00af7ee0f131
SHA256

96ecc21946088520e6e4f0a2bcf6be57b6493250bb29fbec3dc00606824fa01a
SHA512

9d3a3ec3b5474475dc9cf2194af54148acaa1ffb76dd5b287accc94f96e8079d8d5d554b690da12adb0e92355fa5b41b284e07ddbac4e8f9328e1be3bd17cff7
SSDEEP

6144:OSB+RynDmczz7dtr1taExrsmbkBBfafco5DpBrFbhPOXz:OS+GbaExvbkzfCZ1POXz

Score

N/A

Malware Config

Signatures

Files

96ecc21946088520e6e4f0a2bcf6be57b6493250bb29fbec3dc00606824fa01a
.exe windows x86

c0dbe0ff90e24abbb081943b3a4891dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItemTextW
DestroyWindow
CharNextW
GetSystemMetrics
GetDlgItem
GetDialogBaseUnits
SendMessageW
GetParent
MessageBoxW
SetWindowTextW
DrawTextW
SetWindowLongW
GetWindowRect
SetFocus
GetWindow
SetWindowPos
SetDlgItemTextW
CopyRect
CreateDialogParamW
SendDlgItemMessageW
MapWindowPoints
SystemParametersInfoW
GetClientRect
DialogBoxParamW
ShowWindow
LoadImageW
EndDialog
EnableWindow
GetWindowLongW
LoadStringW

advapi32

TraceMessage
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW
GetTraceLoggerHandle
RegEnumKeyExW
GetTraceEnableLevel
UnregisterTraceGuids
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
GetTraceEnableFlags
RegDeleteValueW
RegisterTraceGuidsW
RegQueryInfoKeyW

kernel32

FlushInstructionCache
GetCurrentProcessId
GetSystemInfo
GetTickCount
DeleteCriticalSection
lstrcatW
GetEnvironmentStringsA
GetLastError
SetLastError
IsValidCodePage
lstrlenW
GetProcAddress
HeapDestroy
HeapFree
QueryPerformanceCounter
GetStartupInfoA
SizeofResource
LoadLibraryW
LoadLibraryA
HeapAlloc
VirtualFree
FreeLibrary
FindResourceW
SetUnhandledExceptionFilter
lstrcmpiW
GetSystemTimeAsFileTime
InterlockedDecrement
OutputDebugStringA
lstrlenA
LoadResource
lstrcpynW
GetProcessHeap
InterlockedIncrement
GetModuleFileNameW
LeaveCriticalSection
GetUserDefaultLCID
FormatMessageW
lstrcpyW
MultiByteToWideChar
LocalFree
GetCurrentProcess

wldap32

ldap_count_values
ldap_controls_freeW
ldap_count_references
ldap_count_entries

rpcrt4

CStdStubBuffer_IsIIDSupported
NdrOleAllocate
CStdStubBuffer_CountRefs
CStdStubBuffer_Disconnect
NdrDllUnregisterProxy
NdrOleFree
NdrCStdStubBuffer_Release
CStdStubBuffer_AddRef
NdrDllGetClassObject
CStdStubBuffer_Invoke
NdrDllCanUnloadNow
CStdStubBuffer_Connect
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerQueryInterface
NdrDllRegisterProxy

gdi32

SetBkMode

shell32

SHGetFolderPathW
ShellExecuteW

Sections

text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 146KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0dbe0ff90e24abbb081943b3a4891dd

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

kernel32

wldap32

rpcrt4

gdi32

shell32

Sections

text Size: 121KB - Virtual size: 121KB

.rdata Size: 146KB - Virtual size: 166KB

.rsrc Size: 7KB - Virtual size: 6KB

text
Size: 121KB - Virtual size: 121KB

.rdata
Size: 146KB - Virtual size: 166KB

.rsrc
Size: 7KB - Virtual size: 6KB