5d334d2a7db182d26dd7c8121012502b70a20e9892115b9c58c404fcbc62cb17

Sharing

Copy URL

Twitter E-mail

General

Target

5d334d2a7db182d26dd7c8121012502b70a20e9892115b9c58c404fcbc62cb17
Size

55KB
MD5

0527230f7f75b57d3ce88ccc9c5b0ea0
SHA1

6dd27e391c36fb4c73cfc405cb96dd35c5cdcfa8
SHA256

5d334d2a7db182d26dd7c8121012502b70a20e9892115b9c58c404fcbc62cb17
SHA512

6d88ea0eb37c1e1f11d65cbda72bfc991c7b6b1c07701256173bb4db468829730e7e102dd02b05120fea2c8653badab86b0d5ccaacdc5510ea8339db494c8f74
SSDEEP

768:pxEkE/RyVACX7Tm40Wv1Wcvex0C4BkRSoOaOd019YE9O7upN9LeCpkeb4s+JCkuw:pxEnoVVFvs7V4B+OC19YEagLeCDACXQ

Score

N/A

Malware Config

Signatures

Files

5d334d2a7db182d26dd7c8121012502b70a20e9892115b9c58c404fcbc62cb17
.exe windows x86

a0864b97e199a6d3dd6cdc1d04b9eb68

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

libufun

UF_is_ugmanager_active
UF_UGMGR_initialize
UF_initialize
UF_get_fail_message
UF_UGMGR_terminate

libugutils

?DIR_walk_directory@@YA_NPBDH_NP6A_N0PAX@ZP6A_N0H2@Z2@Z

libsyss

?ARG_get_switch@@YAPBDPBDHPAH@Z
??4UString@UGS@@QAEAAV01@ABV01@@Z
?CFI_close_file@@YAHPAHH@Z
?substr@UString@UGS@@QBE?AV12@II@Z
?rfind@UString@UGS@@QBEIDI@Z
??1UString@UGS@@QAE@XZ
??0UString@UGS@@QAE@XZ
?ERROR_raise@@YAXPBDHH0ZZ
??3UString@UGS@@SAXPAX0@Z
?nat110@@YAPADPBD@Z
?SM_free@@YAXPAX@Z
?free@CppMemory@Memory@UGS@@SAXPAX@Z
?allocate@CppMemory@Memory@UGS@@SAPAXI@Z
?ARG_init_module@@YAXHPAPAD@Z
??0UString@UGS@@QAE@PBD@Z
?CFI_ask_directory_exist@@YAHPBD@Z
?ERROR_lprintf@@YAHPBDZZ
?CFI_read_line@@YAHHPAPAD@Z
?CLOCK_local_decoded_time@@YAXPAUdate_s@@@Z
?CLOCK_get_date_string@@YAHPBUdate_s@@_NPAD@Z
?format@UString@UGS@@SA?AVUStringFormatter@2@PBD@Z
??RUStringFormatter@UGS@@QAEAAV01@PBD@Z
??BUStringFormatter@UGS@@QBE?AVUString@1@XZ
??1UStringFormatter@UGS@@QAE@XZ
??RUStringFormatter@UGS@@QAEAAV01@ABVUString@1@@Z
??RUStringFormatter@UGS@@QAEAAV01@H@Z
?CFI_ask_file_exist@@YAHPBD@Z
?OM__log@OM@UGS@@YAHPAVObject@12@@Z
?utf8_str@UString@UGS@@QBEPBDXZ
?OM_create_utf8_string@@YAPAVUtf8String@OM@UGS@@PBD@Z
?OM__delete_utf8_string@@YAXPAVUtf8String@OM@UGS@@@Z
?GetChars@String@OM@UGS@@QBEPBDXZ
?CFI_expand_filename@@YAHPBDHPAPAD@Z
?from_locale@UString@UGS@@SA?AV12@PBD@Z
?iequal@UString@UGS@@QBE_NABV12@@Z
?find@UString@UGS@@QBEIABV12@I@Z
?trim@UString@UGS@@QBE?AV12@XZ
?size@UString@UGS@@QBEIXZ
?CFI_write_line@@YAHHPBD@Z
?CFI_is_directory@@YA_NPBD@Z
?CFI_add_extension@@YAHPBDHPAPAD@Z
?CFI_open_file@@YAHPBDHHHPAH@Z
??0UString@UGS@@QAE@ABV01@@Z
?to_locale@UString@UGS@@QBEPADXZ

libugmr

?UGMGR__c2c_add_to_container@@YAHIIHQBH@Z
?UGMGR_find_container@@YAIPBD@Z
?UGMGR_free_pdi_string_array@@YAXHPAPAD@Z
?UGMGR_ask_tc_pref_values@@YAHW4UGMGR__tc_prefs_e@@PAHPAPAPAD@Z

libvisualreporting

?Save@DisplayScheme@CondFormat@Gateway@UGS@@QAEXXZ
?SetFilename@DisplayScheme@CondFormat@Gateway@UGS@@QAEXPBD@Z
?GetName@DisplayScheme@CondFormat@Gateway@UGS@@QBE?AVUString@4@XZ
?Create@VisualReportBuilderFactory@CondFormat@Gateway@UGS@@SAPAVVisualReportBuilder@234@PAVDisplayScheme@234@@Z
?LoadReportFully@DisplaySchemeManager@CondFormat@Gateway@UGS@@QAEPAVDisplayScheme@234@ABVUString@4@_NPAH@Z
?IsUsingManagedReports@DisplaySchemeManager@CondFormat@Gateway@UGS@@QBE_NXZ
?Validate@DisplayScheme@CondFormat@Gateway@UGS@@QBEHXZ
?SetKeywords@DisplayScheme@CondFormat@Gateway@UGS@@QAEXABVUString@4@@Z
?EstablishDisplaySchemeManager@CondFormat@Gateway@UGS@@YAPAVDisplaySchemeManager@123@XZ

libjam

?GetJournalledInterface@ClassInitializer@JAM@UGS@@SAPAVIJAInterface@23@PBD@Z
?GetUnjournalledInterface@ClassInitializer@JAM@UGS@@SAPAVIJAInterface@23@PBD@Z

libpdi

?PDI_delete_container@@YAHI@Z
?PDI_allow_all_errors@@YAXXZ
?PDI_create_container@@YAHPBD0PAI@Z

msvcr100

_controlfp_s
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_onexit
_lock
__dllonexit
_unlock
__iob_func
fprintf
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??2@YAPAXI@Z
printf
exit
__CxxFrameHandler3
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_crt_debugger_hook
_invoke_watson

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A

kernel32

EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
IsDebuggerPresent
UnhandledExceptionFilter
HeapSetInformation
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess

Exports

Exports

?NXSigningResource@@YAXXZ

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a0864b97e199a6d3dd6cdc1d04b9eb68

Headers

DLL Characteristics

File Characteristics

Imports

libufun

libugutils

libsyss

libugmr

libvisualreporting

libjam

libpdi

msvcr100

msvcp100

kernel32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 19KB - Virtual size: 22KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 19KB - Virtual size: 22KB