cc13bfbc928cdbed38fc6efc8754edea79b0569f8d6ccf4b37dc8129ca39a28b

Sharing

Copy URL Twitter E-mail

General

Target

cc13bfbc928cdbed38fc6efc8754edea79b0569f8d6ccf4b37dc8129ca39a28b
Size

148KB
MD5

199dd21e6f87a2075d724ef901621460
SHA1

c4bd17e8fa57ed57f63f2529c3deeac4e56d5d50
SHA256

cc13bfbc928cdbed38fc6efc8754edea79b0569f8d6ccf4b37dc8129ca39a28b
SHA512

3fbcf6a49e6ff0c33145765cae00d1a1c4983d3a262bea99efc623446369770134bd4fde7971ab0eaa396c2b355eef8f7816bed074aafd7e7a2c37a0761778c1
SSDEEP

3072:Q2rCDVtAR6PI+i8kb0Kb3OfW4q63UrwUgCDE3eo4z:HCDVqRf8kN3OfW4q6ErwUgkEOo4

Score

N/A

Malware Config

Signatures

Files

cc13bfbc928cdbed38fc6efc8754edea79b0569f8d6ccf4b37dc8129ca39a28b
.dll windows x86

cb95f613b946c435f1b28ed7893ee5ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr100

__lconv_init
fgetwc
fgetc
fgets
fclose
swscanf
_vscwprintf_p
_vswprintf_p
_wmkdir
mbstowcs
memset
_wstat64i32
_wsplitpath_s
_wfopen_s
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_onexit
_lock
__dllonexit
_unlock
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??2@YAPAXI@Z
_purecall
memmove
memcpy
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z

mfc100u

ord11244
ord11246
ord12724
ord2853
ord8393
ord10045
ord6247
ord11163
ord8112
ord13380
ord10937
ord3402
ord11081
ord8277
ord4430
ord14059
ord14132
ord14149
ord14145
ord14147
ord14148
ord14146
ord2417
ord7385
ord2884
ord2887
ord12606
ord5556
ord2756
ord2980
ord2981
ord10412
ord10058
ord8179
ord11123
ord948
ord13305
ord9525
ord3260
ord6711
ord908
ord2091
ord1501
ord2053
ord2080
ord1984
ord2045
ord3413
ord408
ord1953
ord2090
ord2088
ord1945
ord1873
ord323
ord1301
ord266
ord4421
ord4392
ord4434
ord4413
ord4379
ord4383
ord4416
ord3999
ord14067
ord3992
ord2665
ord4388
ord7109
ord13388
ord6156
ord10725
ord12557
ord5276
ord2339
ord11116
ord3491
ord2952
ord2951
ord2852
ord11159
ord5143
ord1508
ord1514
ord1512
ord2055
ord1519
ord9333
ord8347
ord381
ord6344
ord3627
ord1987
ord7176
ord322
ord13605
ord1934
ord4425
ord4396
ord4408
ord4404
ord7624
ord7548
ord11784
ord13854
ord4744
ord2164
ord11476
ord11477
ord13381
ord7108
ord13387
ord8530
ord3684
ord3625
ord11864
ord7126
ord1739
ord14162
ord10976
ord13267
ord11469
ord7179
ord13570
ord13567
ord13572
ord13569
ord13571
ord13568
ord3416
ord5261
ord11228
ord11236
ord7391
ord9498
ord11240
ord11209
ord11845
ord4642
ord4923
ord5115
ord8483
ord4901
ord5118
ord4645
ord4794
ord4623
ord6931
ord13382
ord4400
ord6869
ord1292
ord6932
ord6922
ord4792
ord7393
ord9328
ord8346
ord6140
ord890
ord14060

kernel32

GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleW
GetUserDefaultLangID
LoadLibraryW
GetTickCount
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
LocalAlloc
GetProcAddress
IsProcessorFeaturePresent
GetLastError
LoadLibraryA
LocalFree
RaiseException

user32

EnableWindow

advapi32

RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyW

shell32

SHGetSpecialFolderPathW

Exports

Exports

GetSketchUpModelImporterInterface

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cb95f613b946c435f1b28ed7893ee5ef

Headers

DLL Characteristics

File Characteristics

Imports

msvcr100

msvcp100

mfc100u

kernel32

user32

advapi32

shell32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 64KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 7KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 7KB

.rmnet
Size: 56KB - Virtual size: 60KB