f4b22251afb3bafb0b582cd081162aaac211f28d3c99b1dbf40329e4e141a5e2

Sharing

Copy URL

Twitter E-mail

General

Target

f4b22251afb3bafb0b582cd081162aaac211f28d3c99b1dbf40329e4e141a5e2
Size

88KB
MD5

52f7859ad5ff2129647c8eaba709d619
SHA1

d540def24d3249454ce77cc13e2d19114dbe3add
SHA256

f4b22251afb3bafb0b582cd081162aaac211f28d3c99b1dbf40329e4e141a5e2
SHA512

b426f482ca8a3735168eaf70318a107afc6df870d7b4b2646a29a00980670cfb9ce5947523e8ca90aa6307c3d41778162e9a775118444ad2b368763db42fb301
SSDEEP

1536:bX1bBPbFWDGFurZNtIlN+q+VOjUBFzyP4axaCMs89vJYduZu:r1FPbF4PrZNtI/+q+VOjUvOQsErZu

Score

N/A

Malware Config

Signatures

Files

f4b22251afb3bafb0b582cd081162aaac211f28d3c99b1dbf40329e4e141a5e2
.exe windows x86

5ea672ea4409a35f6e7193d79a5dcc46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

omacs32

OCSGetRootInstallPath
OCSGetOMAInstallPath
OCSFreeMem

dsupt32

??0DellLogging@DellSupport@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HH@Z
?setInstance@DellLogging@DellSupport@@SAXAAV12@@Z
??0ModuleDataControl@DellSupport@@QAE@XZ
?setTarget@DellLogging@DellSupport@@QAEXH@Z
??1ModuleDataControl@DellSupport@@UAE@XZ
??1DellLogging@DellSupport@@UAE@XZ
??0DellProgramOptions@DellSupport@@QAE@HPAPAD_N@Z
??1DellProgramOptions@DellSupport@@QAE@XZ
??6DellLogging@DellSupport@@QAEAAV01@K@Z
?DellTokenizer@DellSupport@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0AAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@@Z
?normalizeClassName@DellObjectBase@DellSupport@@KA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?isAccessAllowed@DellLogging@DellSupport@@SA_NXZ
?getInstance@DellLogging@DellSupport@@SAAAV12@XZ
?setloglevel@DellSupport@@YA?AVDellSetLogLevelManipulator@1@H@Z
?endrecord@DellSupport@@YAAAVDellLogging@1@AAV21@@Z
??6DellSupport@@YAAAVDellLogging@0@AAV10@ABVDellSetLogLevelManipulator@0@@Z
??6DellLogging@DellSupport@@QAEAAV01@PBD@Z
??6DellLogging@DellSupport@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??6DellLogging@DellSupport@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1DellSetLogLevelManipulator@DellSupport@@QAE@XZ
?DellRemoveDirectoryImpl@DellSupport@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NAAV23@AAH@Z
??1DellKeyDataNotSupportedException@DellSupport@@UAE@XZ
??4DellException@DellSupport@@QAEAAV01@ABV01@@Z
?getFormattedMessages@DellException@DellSupport@@UBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?popMessage@DellException@DellSupport@@UAE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?setText@DellException@DellSupport@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getText@DellException@DellSupport@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0DellException@DellSupport@@QAE@ABV01@@Z
??1DellException@DellSupport@@UAE@XZ
?getPropertyValue@?$DellProperties@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@DellSupport@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z
??0DellException@DellSupport@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?getDefaultLocale@DellLocaleFactory@DellSupport@@SA?AVlocale@std@@_N@Z
?narrow@DellStringUtilities@DellSupport@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@4@Vlocale@4@@Z
??0DellNotification@DellSupport@@QAE@XZ
??1DellNotification@DellSupport@@UAE@XZ
??1PropertyChanged@DellSupport@@UAE@XZ
?testAndSet@DellCriticalSectionObject@DellSupport@@QAE_NXZ
?unlock@DellCriticalSectionObject@DellSupport@@QAEXXZ
?lock@DellCriticalSectionObject@DellSupport@@QAEXXZ

kernel32

LocalFree
GetLastError
CloseHandle
GetExitCodeProcess
WaitForSingleObject
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
FormatMessageA
CreateProcessA

msvcp80

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z

msvcr80

_amsg_exit
_decode_pointer
_onexit
_lock
__dllonexit
_encode_pointer
__getmainargs
_cexit
_exit
exit
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
_invoke_watson
_controlfp_s
_strdup
_stricmp
_strlwr
_dup2
_XcptFilter
__CxxFrameHandler3
strchr
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
??0exception@std@@QAE@XZ
_dup
??_V@YAXPAX@Z
_CxxThrowException
printf
isspace
free
malloc
getenv
strncpy
_putenv
fclose
fgets
fopen
_chdir
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
__RTtypeid
??2@YAPAXI@Z
memmove_s
_splitpath
_getcwd
memset
fflush
fprintf
_fileno
__iob_func
atoi
?terminate@@YAXXZ
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
__clean_type_info_names_internal
_unlock

Exports

Exports

??0DellKeyDataNotSupportedException@DellSupport@@QAE@ABV01@@Z
??0PropertyChanged@DellSupport@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0PropertyChanged@DellSupport@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
??4DellKeyDataNotSupportedException@DellSupport@@QAEAAV01@ABV01@@Z
??DDellProgramOptions@DellSupport@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??EDellProgramOptions@DellSupport@@QAEAAV?$_Vector_const_iterator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
??FDellProgramOptions@DellSupport@@QAEAAV?$_Vector_const_iterator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
??_7DellKeyDataNotSupportedException@DellSupport@@6B@
??_7PropertyChanged@DellSupport@@6B@
?DellRemoveDirectory@DellSupport@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?begin@DellProgramOptions@DellSupport@@QBE?AV?$_Vector_const_iterator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?enableRecordData@DellLogging@DellSupport@@QAEX_N@Z
?end@DellProgramOptions@DellSupport@@QBE?AV?$_Vector_const_iterator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?getArgument@DellProgramOptions@DellSupport@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$_Vector_const_iterator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@@Z
?getArgument@DellProgramOptions@DellSupport@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getArgumentCount@DellProgramOptions@DellSupport@@QBEIXZ
?getCallStack@DellException@DellSupport@@UBEABV?$stack@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$deque@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@@2@@std@@XZ
?getClassName@DellObjectBase@DellSupport@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getCode@DellException@DellSupport@@UBEHXZ
?getIterator@DellProgramOptions@DellSupport@@QBEABV?$_Vector_const_iterator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?getLogLevel@DellLogging@DellSupport@@QBEHXZ
?getProgramName@DellProgramOptions@DellSupport@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSwitch@DellProgramOptions@DellSupport@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@0@Z
?getSwitch@DellProgramOptions@DellSupport@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?getUText@DellException@DellSupport@@UBEABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?isA@DellObjectBase@DellSupport@@UBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lock@DellCriticalSection@DellSupport@@QAEXXZ
?pushMessage@DellException@DellSupport@@UAEXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?reset@DellProgramOptions@DellSupport@@QAEAAV?$_Vector_const_iterator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?setCode@DellException@DellSupport@@UAEXH@Z
?setLogLevel@DellLogging@DellSupport@@QAEXH@Z
?setText@DellException@DellSupport@@UAEXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?testAndSet@DellCriticalSection@DellSupport@@QAE_NXZ
?unlock@DellCriticalSection@DellSupport@@QAEXXZ

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5ea672ea4409a35f6e7193d79a5dcc46

Headers

File Characteristics

Imports

omacs32

dsupt32

kernel32

msvcp80

msvcr80

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 47KB - Virtual size: 48KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 47KB - Virtual size: 48KB