fcab4335ae4493507a34d848d4272aa4b641a8e8b554fea273a68b1d2e8ca6ab

Sharing

Copy URL Twitter E-mail

General

Target

fcab4335ae4493507a34d848d4272aa4b641a8e8b554fea273a68b1d2e8ca6ab
Size

216KB
MD5

59bfdc8132c419157610ac4d949aae08
SHA1

7ac8cc88689cb57c6525431394383b9af9b1a97e
SHA256

fcab4335ae4493507a34d848d4272aa4b641a8e8b554fea273a68b1d2e8ca6ab
SHA512

7607b845f35df60aa88d8349128a73f21ce60850053d2ce2539efc6b7c20fc1ec3582aaff22e73576dfd6d96419edf9567dec90704b46200ec3566574e929527
SSDEEP

3072:EmgXxJvVJj/+eEfftySI3AY1QayvwxjJBLiuw2do8LUTncp9lsZzikC/bpijhu:CzV96XtrOt5Jxfw2dHLUIpDCzi5ijY

Score

N/A

Malware Config

Signatures

Files

fcab4335ae4493507a34d848d4272aa4b641a8e8b554fea273a68b1d2e8ca6ab
.dll windows x86

b2626ca78b2e7976e3b0f223cc62a2ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
FreeLibrary
CompareStringA
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
CloseHandle
LoadLibraryA
GetLastError
SetLastError
GlobalLock
GlobalUnlock
LocalAlloc
InitializeCriticalSection
GlobalFree
GetSystemDirectoryA
InterlockedExchange
DeleteCriticalSection
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersionExA
LocalFree

advapi32

RegCloseKey

user32

GetDC
ReleaseDC

gdi32

SelectObject
BitBlt
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC

mfc71lu

ord6215
ord5378
ord3826
ord1911
ord2925
ord5220
ord5222
ord2239
ord3942
ord4562
ord5226
ord5209
ord5562
ord2531
ord2725
ord2829
ord4301
ord2708
ord2832
ord2534
ord2640
ord2527
ord6284
ord3713
ord3703
ord2638
ord3943
ord4475
ord4255
ord3327
ord757
ord3824
ord293
ord577
ord280
ord1479
ord870
ord2895
ord282
ord2926
ord3800
ord1472
ord774
ord283
ord3927
ord287
ord5083
ord899
ord3990
ord5524
ord777
ord4320
ord2009
ord1007
ord5096
ord566
ord1197
ord1199
ord1093
ord371
ord1115
ord1192
ord1168
ord1170
ord314
ord1200
ord1079
ord1087
ord1162
ord581
ord384
ord5319
ord629
ord265
ord1430
ord762
ord2361
ord5870
ord266
ord764
ord1033
ord5579
ord2054
ord6274
ord3795
ord6272
ord4032
ord4008
ord6111
ord3677
ord315
ord765
ord3712

mslur71

??1exception@@UAE@XZ
??0exception@@QAE@XZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
__security_error_handler
free
_except_handler3
memset
_wtoi
memmove
_CxxThrowException
??0exception@@QAE@ABV0@@Z
wcslen
wcscpy
wcstol
__CxxFrameHandler

ltfil14nu

ord116
ord101
ord118

ltkrn14nu

ord125
ord144

ltdis14nu

ord125

mslup71

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z

Exports

Exports

??0CFRManager@@QAE@ABV0@@Z
??0CFRManager@@QAE@XZ
??1CFRManager@@QAE@XZ
??4CFRManager@@QAEAAV0@ABV0@@Z
?CheckMirrorLang@CFRManager@@QAE_NXZ
?ConvertXOR@CFRManager@@AAEXPADH@Z
?CreateMirroredBitmap@CFRManager@@QAEPAUHBITMAP__@@PAU2@@Z
?Fn_Decode@CFRManager@@QAEHPBG@Z
?Fn_Encode@CFRManager@@QAEHPBG0@Z
?Fn_Init@CFRManager@@QAEHV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z
?Fn_LoadBitmap@CFRManager@@QAEPAUHBITMAP__@@I@Z
?Fn_LoadBitmapEx@CFRManager@@QAEPAUHBITMAP__@@I_N@Z
Fn_LoadBitmap2
Manager

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b2626ca78b2e7976e3b0f223cc62a2ca

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

mfc71lu

mslur71

ltfil14nu

ltkrn14nu

ltdis14nu

mslup71

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 920B

.reloc Size: 4KB - Virtual size: 3KB

.text Size: 172KB - Virtual size: 172KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 920B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 172KB - Virtual size: 172KB