aa46c0a6e615cbaf3df0a1090bdc2cf9c99b927043e7cc13b97d985a9db715ad

Sharing

Copy URL Twitter E-mail

General

Target

aa46c0a6e615cbaf3df0a1090bdc2cf9c99b927043e7cc13b97d985a9db715ad
Size

261KB
MD5

68428310a2ec54bc72d27747bc0c6250
SHA1

4e52de4da4b42f603be33aa44a52054458d50885
SHA256

aa46c0a6e615cbaf3df0a1090bdc2cf9c99b927043e7cc13b97d985a9db715ad
SHA512

1c69ef8b50d0f37b2d364acd5fd96159f6b01ffc4ebea5da45e9cc5cde1cacb5b9268c3425d3da5f7c08c001d3a74365281d76bb2b4278b9489baf076d05f14a
SSDEEP

3072:e+h8XtMKZZ8aF98IshFBBv4gqR0R4riaHz1CJKq7SgXgjizzrcqKSJzZ/IP7DbMi:Xh8Xtz8A9hmr2R0GriaT4gjOXnJ7

Score

N/A

Malware Config

Signatures

Files

aa46c0a6e615cbaf3df0a1090bdc2cf9c99b927043e7cc13b97d985a9db715ad
.dll windows x86

61df40539e7309157eade1abba3649ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

_memicmp
iswctype
_wtol
_memccpy
iswalpha
wcsspn
RtlUnwind
_wcsupr

kernel32

GlobalFree
GlobalAlloc
GlobalAlloc

msvcrt

remove
_wgetenv
_sleep
strtod
strxfrm
_swab
atof
_heapwalk
_wexecl
_wcsset
_wexeclpe

user32

CharNextW

ole32

StgCreateDocfile
CoInstall
FmtIdToPropStgName
OleDuplicateData
OleNoteObjectVisible
CoReleaseMarshalData
CoGetInstanceFromFile
OleCreateMenuDescriptor
OleCreateLinkFromData
STGMEDIUM_UserMarshal
StringFromIID
CoRegisterPSClsid
CoGetObject
OleConvertIStorageToOLESTREAMEx
OleConvertOLESTREAMToIStorage

msi

ord162
ord151
ord36
ord160
ord5
ord138
ord228
ord24
ord141
ord19
ord34
ord119
ord135
ord130
ord181
ord15
ord55
ord65
ord63
ord16
ord27
ord44
ord56
ord172
ord97
ord45
ord72
ord89
ord154
ord220
ord206

esent

JetGetCurrentIndex
JetDefragment
JetGetLogInfo
JetCreateDatabase2
JetStopBackup
JetIdle
JetEscrowUpdate
JetRetrieveColumn
JetBackup
JetGetCursorInfo
JetDeleteIndex
JetCreateTable
JetGetDatabaseFileInfo
JetMakeKey
JetGetTableIndexInfo
JetCommitTransaction
JetStopService
JetSetCurrentIndex
JetDetachDatabase
JetGetSystemParameter
JetGetIndexInfo
JetOpenTempTable3

Exports

Exports

AngleTapeMemFileBag
AssignObjref
BringAutodialLimitAttributesBagStream
DecryptEncryptCompositeFreeClose
DeferLibraryHeaps
ImportProtectCommKeyNameButtons
InflateLineModemBlobUrlImage

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61df40539e7309157eade1abba3649ca

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

msvcrt

user32

ole32

msi

esent

Exports

Exports

Sections

.text Size: 74KB - Virtual size: 73KB

.data Size: 7KB - Virtual size: 6KB

.idata Size: 3KB - Virtual size: 3KB

.edata Size: 24KB - Virtual size: 24KB

.hdata Size: 10KB - Virtual size: 9KB

.tls Size: 28KB - Virtual size: 28KB

.reloc Size: 5KB - Virtual size: 5KB

.rsrc Size: 106KB - Virtual size: 105KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 74KB - Virtual size: 73KB

.data
Size: 7KB - Virtual size: 6KB

.idata
Size: 3KB - Virtual size: 3KB

.edata
Size: 24KB - Virtual size: 24KB

.hdata
Size: 10KB - Virtual size: 9KB

.tls
Size: 28KB - Virtual size: 28KB

.reloc
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 106KB - Virtual size: 105KB

.reloc
Size: 1024B - Virtual size: 4KB