308c9b44e3c42f3ff76371d9c71e21a6684de36579de6866fbfd5390e02a30b4

Sharing

Copy URL Twitter E-mail

General

Target

308c9b44e3c42f3ff76371d9c71e21a6684de36579de6866fbfd5390e02a30b4
Size

321KB
MD5

419fb3668b1ad21a26833d59ab115050
SHA1

77ca73e62d94b1e87e0e148d7be1c3e4df20c630
SHA256

308c9b44e3c42f3ff76371d9c71e21a6684de36579de6866fbfd5390e02a30b4
SHA512

b6ebce052790a6a98a4415b42b1dc8924f507b6a89ebde0e67bb2b02db8ad9c63a7a7d7a85b1a7bda3528ed1034132c41b017453f1736330f8897605be866088
SSDEEP

6144:8zmZ8XNfapGqsxP7Bgqz6bRzTdiYHXtSLwfGqykuOb++vH:8KZ89SIh7z6F3RHXKaGKuOS+vH

Score

N/A

Malware Config

Signatures

Files

308c9b44e3c42f3ff76371d9c71e21a6684de36579de6866fbfd5390e02a30b4
.exe windows x86

ec41b624ca8ea5de4fc99e18711df3fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NdrDllUnregisterProxy
NdrOleAllocate
CStdStubBuffer_AddRef
NdrDllRegisterProxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_Invoke
NdrDllCanUnloadNow
CStdStubBuffer_CountRefs
NdrDllGetClassObject
CStdStubBuffer_Disconnect
NdrOleFree
NdrCStdStubBuffer_Release
CStdStubBuffer_Connect
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_IsIIDSupported

kernel32

lstrcatW
QueryPerformanceCounter
DeleteCriticalSection
lstrcpynW
LeaveCriticalSection
LoadResource
GetSystemTimeAsFileTime
LoadLibraryW
GetProcAddress
lstrcmpiW
SetLastError
FlushInstructionCache
InterlockedDecrement
HeapDestroy
GetLastError
HeapAlloc
SetUnhandledExceptionFilter
FormatMessageW
GetCurrentProcessId
LoadLibraryA
FindResourceW
FreeLibrary
lstrcpyW
InterlockedIncrement
SizeofResource
lstrlenA
GetEnvironmentStringsA
GetProcessHeap
VirtualFree
GetSystemInfo
GetUserDefaultLCID
MultiByteToWideChar
OutputDebugStringA
GetTickCount
GetModuleFileNameW
lstrlenW
IsValidCodePage
GetStartupInfoA
HeapFree
GetCurrentProcess
LocalFree

gdi32

SetBkMode

advapi32

GetTraceLoggerHandle
RegCloseKey
GetTraceEnableFlags
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegisterTraceGuidsW
UnregisterTraceGuids
RegQueryInfoKeyW
GetTraceEnableLevel
RegOpenKeyExW
RegDeleteValueW
TraceMessage
RegSetValueExW

user32

SetFocus
SendMessageW
ShowWindow
LoadStringW
CharNextW
SetWindowTextW
SetWindowPos
MessageBoxW
MapWindowPoints
GetDlgItemTextW
DialogBoxParamW
GetParent
SetDlgItemTextW
GetClientRect
DestroyWindow
GetSystemMetrics
EnableWindow
SendDlgItemMessageW
GetWindowLongW
CopyRect
DrawTextW
CreateDialogParamW
GetWindowRect
GetWindow
LoadImageW
GetDialogBaseUnits
SystemParametersInfoW
EndDialog
GetDlgItem
SetWindowLongW

wldap32

ldap_count_entries
ldap_count_references
ldap_count_values
ldap_controls_freeW

shell32

SHGetFolderPathW
ShellExecuteW

Sections

text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 157KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec41b624ca8ea5de4fc99e18711df3fb

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

kernel32

gdi32

advapi32

user32

wldap32

shell32

Sections

text Size: 126KB - Virtual size: 125KB

.rdata Size: 157KB - Virtual size: 176KB

.rsrc Size: 36KB - Virtual size: 36KB

text
Size: 126KB - Virtual size: 125KB

.rdata
Size: 157KB - Virtual size: 176KB

.rsrc
Size: 36KB - Virtual size: 36KB