efe8b40274c5b8ed75a39ee1562755d53d0d05f5197f2bc72a72eac623ba2dce

Sharing

Copy URL Twitter E-mail

General

Target

efe8b40274c5b8ed75a39ee1562755d53d0d05f5197f2bc72a72eac623ba2dce
Size

63KB
MD5

96f9ec41bcca3985d4d599aa50411499
SHA1

d0229a254f98aae33fb1e21622d47e8690afd8d0
SHA256

efe8b40274c5b8ed75a39ee1562755d53d0d05f5197f2bc72a72eac623ba2dce
SHA512

c0a7b3dbd4a0c7bef4dc6d835c367a58d955c195fcac6017830677910e952708ddef1584e6fbdeeb26192acea3e1526326baabe38dfc555bd9f272affaf76d86
SSDEEP

1536:iTaPjYhMPWIUTHIdlpvSm90ZqSSdsKRBcAvw+gtM:nPjdvUTyl5SQfdePT+gt

Score

N/A

Malware Config

Signatures

Files

efe8b40274c5b8ed75a39ee1562755d53d0d05f5197f2bc72a72eac623ba2dce
.dll windows x86

0dc4cb272904851313c94586571212e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SafeArrayCreate
VariantCopy
GetActiveObject
SafeArrayAccessData
SysReAllocStringLen

kernel32

RtlUnwind
GetLocaleInfoA
ResumeThread
GetModuleHandleA
EnterCriticalSection
FileTimeToSystemTime
LoadResource
CreateFileA
GetComputerNameW
TerminateProcess
FileTimeToDosDateTime
WaitForMultipleObjects
GetACP
GetExitCodeProcess
VirtualQueryEx
FreeResource
UnmapViewOfFile
CreateFileMappingW
SetErrorMode
SetEvent
ReleaseMutex
TryEnterCriticalSection
GetComputerNameA
HeapAlloc
LoadLibraryExA
lstrlenW
lstrlenW
TerminateProcess
CloseHandle
CompareStringW
CreateFileW
GetStringTypeExA
SetThreadAffinityMask
GetVersion
GlobalFree
FindResourceA
FileTimeToLocalFileTime
MapViewOfFile

user32

GetKeyState
GetLastActivePopup
LoadIconA
GetDCEx
MoveWindow
DrawIconEx
SetParent
InsertMenuA
UnregisterClassW
RemoveMenu
GetCaretPos
ScreenToClient
ClientToScreen
DestroyCaret
DrawCaption
GetClassInfoA
GetUpdateRect
MsgWaitForMultipleObjects
SendMessageA
GetDesktopWindow
GetMessagePos
PostMessageW
FillRect
FindWindowExA
SetFocus
FindWindowA
SetPropA
PostQuitMessage
CharLowerBuffW
GetClipboardFormatNameA
IsDialogMessageA
IsClipboardFormatAvailable

atmfbc32

_LDenorm
_LSnan
_Toupper
_Strxfrm

comctl32

ImageList_GetDragImage
ImageList_DragMove
ImageList_Replace
ImageList_Remove

shell32

ShellExecuteExA
SHGetDesktopFolder
DragQueryPoint

gdi32

CreateCompatibleDC
GetDIBColorTable
GetNearestColor
GetEnhMetaFileDescriptionA
OffsetClipRgn
LPtoDP
GetEnhMetaFilePaletteEntries
StretchBlt
SetRectRgn
MaskBlt
GetBrushOrgEx
CreateBrushIndirect
SetViewportExtEx
GetWinMetaFileBits
SelectObject

wininet

HttpOpenRequestA
HttpSendRequestA
InternetReadFile

ole32

StringFromGUID2
CoGetClassObject
ProgIDFromCLSID
RegisterDragDrop
OleSetMenuDescriptor
CoUninitialize
CreateDataAdviseHolder

imm32

ImmGetVirtualKey

Exports

Exports

CreateProcessNotify
Component
DllClientCleanup
SdbCloseApphelpInformation
BerBvFree
logotify
FreeADsMem
DllClientStartup
AllocADsStr
ConvertSidToString
BuildADsPathFromLDAPPath
FreeADsStr
AdsTypeToLdapTypeCopyTime
AdsTypeToLdapTypeCopyGeneralizedTime
FindEntryInSearchTable
GetDisplayName
BuildADsParentPath
ChangeSeparator
AllocADsMem
BuildADsParentPathFromObjectInfo
GetPermLayers
GetDomainDNSNameForDomain
GetDefaultServer
BuildADsPathFromParent
ConvertSidToU2Trustee

Sections

.text
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0dc4cb272904851313c94586571212e4

Headers

File Characteristics

Imports

oleaut32

kernel32

user32

atmfbc32

comctl32

shell32

gdi32

wininet

ole32

imm32

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 56KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 56KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB