4b15256533b72147b6714432f17ff9e62770279c8fce47da447019d466a8ef66

Sharing

Copy URL Twitter E-mail

General

Target

4b15256533b72147b6714432f17ff9e62770279c8fce47da447019d466a8ef66
Size

148KB
MD5

47cbeddd59ab7aca61808b0e4f6aed20
SHA1

1f86dd8ecb2bb5ec05cf183becc7dd3e18e6a6ee
SHA256

4b15256533b72147b6714432f17ff9e62770279c8fce47da447019d466a8ef66
SHA512

d59b70c8673357d0502442c5c46b7d08fa28cc010b775e5b2da264e9cf69266a08408fc9b38266f59a7b7523bd953bcbaf03f71841a5fd54911a05aaddbd51f2
SSDEEP

1536:OeoyozEmX5EIIfnfGkv6eng2fwrCHXRhVycyHBHRW8xLOIZ1rHnqKIBdpq/N/V52:ODyqWGkvEnU8pfK1BP+3Uld6i

Score

N/A

Malware Config

Signatures

Files

4b15256533b72147b6714432f17ff9e62770279c8fce47da447019d466a8ef66
.dll windows x86

13045a4937759720906575e30c96c273

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_initterm
_onexit
memcpy
__dllonexit
strlen
mbstowcs
memmove
_ftol
malloc
free
memset
wcstombs
??3@YAXPAX@Z
__CxxFrameHandler
strcpy
??2@YAPAXI@Z
strcat
memcmp

quartz

AMGetErrorTextA

kernel32

FreeResource
LoadResource
GlobalAlloc
GetACP
lstrcmpA
lstrlenA
GlobalFree
GlobalUnlock
GlobalHandle
MultiByteToWideChar
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalLock
ResetEvent
GetLastError
FindResourceA
GetTempPathA
WideCharToMultiByte
GetCurrentProcessId
SetEvent
WaitForSingleObject
CreateEventA
CloseHandle

user32

wsprintfA
wvsprintfA
LoadStringA

advapi32

RegOpenKeyA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA

ole32

CreateItemMoniker
StringFromCLSID
CoTaskMemFree
CoCreateInstance
CoUninitialize
GetRunningObjectTable
CLSIDFromString
StgCreateDocfile
CoInitialize

oleaut32

SysFreeString

u32comm

ufdIsDir
c32SetDLLErrInfo
u32GetOsVersion

olepfrm

?OleCreatePropFrame@@YAJPAUIUnknown@@PBGPAUHWND__@@@Z

Exports

Exports

dxaudApply
dxaudApplyBegin
dxaudApplyEnd
dxaudGetDefault
dxaudGetFilterInfo
dxaudGetFilterNumber
dxaudGetPreview
dxaudInitialize
dxaudIsFilterAvailable
dxaudShowDialog
dxaudUninitialize

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

13045a4937759720906575e30c96c273

Headers

File Characteristics

Imports

msvcrt

quartz

kernel32

user32

advapi32

ole32

oleaut32

u32comm

olepfrm

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 1KB

.text Size: 104KB - Virtual size: 104KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 104KB - Virtual size: 104KB