a63f798a669c074cb8683bd33f8999bebd8002226325b8f62773ba438e481b3a

Sharing

Copy URL Twitter E-mail

General

Target

a63f798a669c074cb8683bd33f8999bebd8002226325b8f62773ba438e481b3a
Size

448KB
MD5

7c95bca49d4a7f67a8b016ecdd8b2142
SHA1

3dae8acdd82c9fedc1279520694cf66f8f1678bd
SHA256

a63f798a669c074cb8683bd33f8999bebd8002226325b8f62773ba438e481b3a
SHA512

85af5f95098ab6105bd2175c07b87f6e31af764e558e611719df99dbaa9f849be835e4ebc48e039512a95576e4d3868040d468326a9e6f27d18305db59366190
SSDEEP

12288:hv7yjDjuFk4LJnqe4qRQhQePCdMgl6kf1TcE+Mjns:hv7yjDjuFkuJnqe4qRQhQePCd9l6kf/T

Score

N/A

Malware Config

Signatures

Files

a63f798a669c074cb8683bd33f8999bebd8002226325b8f62773ba438e481b3a
.dll windows x86

dad3fe36b91645fbf10dd044923a4f2f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcstok
_ftol
_wcsnset
swprintf
wcslen
wcsrchr
_mbscpy
wcscpy
_except_handler3

gdi32

DeleteDC
CreateFontIndirectW
CreateDIBSection
CreateCompatibleDC
SelectObject
StretchDIBits
EndDoc
EndPage
StartPage
GetDeviceCaps
StartDocW
CreateDCW
DeleteObject

kernel32

GetFileSize
DisableThreadLibraryCalls
MoveFileW
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
CreateFileW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
MapViewOfFileEx
SetEndOfFile
DeleteFileW
VirtualAlloc
VirtualFree
WriteFile
CreateFileMappingW
GetLastError
MapViewOfFile
SetLastError
ReadFile
SetFilePointer
UnmapViewOfFile
GetSystemTimeAsFileTime

user32

DrawTextW

Exports

Exports

ConvMmrPageHiResToMrLoRes
ConvMmrPageToMh
ConvMmrPageToMrSameRes
ConvertTiffFileToValidFaxFormat
FXSTIFFInitialize
FindNextEol
FreeMsTagInfo
GetMsTagString
GetW2kMsTiffTags
MemoryMapTiffFile
MergeTiffFiles
MmrAddBranding
PrintTiffFile
ScanMhSegment
ScanMrSegment
TiffAddMsTags
TiffClose
TiffCreate
TiffEndPage
TiffExtractFirstPage
TiffGetCurrentPageData
TiffOpen
TiffPostProcessFast
TiffPrint
TiffPrintDC
TiffRead
TiffRecoverGoodPages
TiffSeekToPage
TiffSetCurrentPageWidth
TiffStartPage
TiffUncompressMmrPage
TiffUncompressMmrPageRaw
TiffWrite
TiffWriteRaw

Sections

.text
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dad3fe36b91645fbf10dd044923a4f2f

Headers

File Characteristics

Imports

msvcrt

gdi32

kernel32

user32

Exports

Exports

Sections

.text Size: 382KB - Virtual size: 382KB

.data Size: 60KB - Virtual size: 60KB

.rsrc Size: 1024B - Virtual size: 1008B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 382KB - Virtual size: 382KB

.data
Size: 60KB - Virtual size: 60KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 3KB - Virtual size: 2KB