6717280e563d2b41a00bfbf604b825c31ad5d56b5fcc6a5379cd98e96aefa368

Sharing

Copy URL Twitter E-mail

General

Target

6717280e563d2b41a00bfbf604b825c31ad5d56b5fcc6a5379cd98e96aefa368
Size

62KB
MD5

808e8aa174c9da90e43f866234e14cb0
SHA1

5ea7fec0a8e0fc9f305da3b4f2f5939e0b558667
SHA256

6717280e563d2b41a00bfbf604b825c31ad5d56b5fcc6a5379cd98e96aefa368
SHA512

dbd801fe6617f536fcac6825d6c91a3676454ee05e161c242f5a42e7b05863b044574258803ffe3d763aef35cc8fbad892c1802ecf9a5a4ed4208a3dc832cca4
SSDEEP

1536:78JFxE3qRYCtnNYeHoIH5n+YhN1EPyJ7suVUogBBsh:AJyCrJr+0EaJtVkTg

Score

N/A

Malware Config

Signatures

Files

6717280e563d2b41a00bfbf604b825c31ad5d56b5fcc6a5379cd98e96aefa368
.dll windows x86

1c52e4ad19616c97e81bf4ea75e90389

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
GetCaretPos
MessageBoxA
GetClientRect
CreateCaret
CreateWindowExA
GetForegroundWindow
GetKeyState
IsWindow
AppendMenuA
GetKeyboardLayout
GetParent
LoadCursorA
UnhookWindowsHookEx
SetCaretPos
ReleaseDC
IntersectRect
GetWindowRect
DrawFocusRect
wsprintfA
CharToOemBuffA
CallNextHookEx
ShowWindow
RegisterClipboardFormatA
SetFocus
SetActiveWindow
ScreenToClient
InvalidateRect

kernel32

MultiByteToWideChar
GetVersion
GetFileAttributesA
RtlUnwind
QueryPerformanceFrequency
WriteFile
DeleteCriticalSection
GlobalLock
GetStdHandle
DuplicateHandle
GetTickCount
RaiseException
SetProcessAffinityMask
GetDateFormatA
TerminateProcess
lstrlenW
SetHandleCount
GetCurrentThread
GetComputerNameW
GetProcAddress
WaitForMultipleObjects
SetThreadLocale
CloseHandle
GetModuleHandleA
ReleaseMutex
SetFilePointer
GetModuleHandleA
GetCPInfo
SizeofResource
ReadFile
VirtualQueryEx
MapViewOfFileEx
VirtualQuery
LeaveCriticalSection
GetUserDefaultLCID
CloseHandle
InitializeCriticalSection
IsValidCodePage
GetLocaleInfoA
LCMapStringA
GetLastError
CreateFileMappingW
WaitForSingleObject
GetDriveTypeA
InterlockedDecrement
FileTimeToLocalFileTime
FindResourceA
WideCharToMultiByte
DeleteFileA
GetWindowsDirectoryA
HeapAlloc
GetStringTypeA
LocalAlloc
GetSystemDefaultLangID

dpvvplug

_Getcvt
_FSnan
_FNan
_LExp
_FEps
_Mbrtowc
_FDnorm
_Poly
_FSinh
_FRteps
_LEps
_FXbig
_Dnorm
_Stod
_Inf
_Dscale
_Strxfrm
_LDtest
_LSinh
_FDtest
_Dtest
_Toupper
_Rteps
_FExp
_Sinh
_LDscale
_FInf
_LCosh
_Nan
_LXbig

shell32

SHGetPathFromIDListA
SHGetMalloc
SHChangeNotify

comctl32

ImageList_DragShowNolock
ImageList_DragMove
ImageList_BeginDrag
ImageList_SetDragCursorImage
PropertySheetA
CreatePropertySheetPageA

ole32

RegisterDragDrop
DoDragDrop
OleUninitialize

gdi32

CreateRectRgn
GetTextExtentPoint32A
CreateFontIndirectA
SelectObject
GetClipBox
SetBkColor
ExtTextOutW

Exports

Exports

CreateProcessNotify
DllClientCleanup
debu2bin
AllocADsMem
DllClientStartup
BerBvFree
ApphelpUpdateCacheEntry
GetDefaultServer
AdsTypeToLdapTypeCopyTime
FreeADsStr
BuildADsPathFromParent
FindEntryInSearchTable
BuildADsParentPathFromObjectInfo
ConvertSidToU2Trustee

Sections

.text
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c52e4ad19616c97e81bf4ea75e90389

Headers

File Characteristics

Imports

user32

kernel32

dpvvplug

shell32

comctl32

ole32

gdi32

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 56KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 56KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB