70bed7b9bef4e033ac9300b216a86ce3a22907859e56b940844e9768377c27ca

Sharing

Copy URL Twitter E-mail

General

Target

70bed7b9bef4e033ac9300b216a86ce3a22907859e56b940844e9768377c27ca
Size

1.5MB
MD5

0000d5c29c7ec5bc51c77a2393cce8cd
SHA1

8e837ee2a81eed51d017fbb7d5fba44fe2e5f58c
SHA256

70bed7b9bef4e033ac9300b216a86ce3a22907859e56b940844e9768377c27ca
SHA512

2926e2a23c463d3162fb0483a57cc4c22eef8e75f8bfde737277730139b868d08a85a61cf73186e0248499d6998fdf0918484766d3e5d88d10a619e903642548
SSDEEP

24576:VIJUoUM/fR3S17U+TaO2YSWqaZdWdhlgRK/r4rKOpm/UrzXAEa67wopYWGD:NCJm7U+TaYjoQQOpm/UXLkUq

Score

N/A

Malware Config

Signatures

Files

70bed7b9bef4e033ac9300b216a86ce3a22907859e56b940844e9768377c27ca
.dll windows x86

a7661dfca59b831c7b9036a1e431bff4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
_atoi64
_gcvt
_ui64toa
_ultoa
_i64toa
_ltoa
_splitpath
strlen
vsprintf
_mbclen
_mbsinc
memcmp
_ismbcspace
sprintf
atof
_fcvt
wcsrchr
wcscpy
_mbctoupper
_mbspbrk
_makepath
_stati64
strcat
memmove
wcscat
wcschr
memchr
_vsnprintf
abs
_snprintf
strncpy
ceil
wcscmp
wcsncpy
_mbsnbcpy
memcpy
bsearch
_purecall
_mbsrchr
_mbsnbcmp
_mbsnbicmp
_mbsstr
realloc
wcslen
memset
strcpy
_mbschr
_lfind
??2@YAPAXI@Z
free
malloc
qsort
_itoa
localtime
time
__CxxFrameHandler
_mbsicmp
_mbscmp
atoi
??3@YAXPAX@Z
_adjust_fdiv
_CxxThrowException

mpr

WNetCloseEnum
WNetOpenEnumA
WNetGetUniversalNameA
WNetEnumResourceA

kernel32

LocalAlloc
InterlockedExchange
RaiseException
TlsGetValue
GetUserDefaultLangID
CompareStringA
GetModuleHandleA
GetDriveTypeA
GetFullPathNameA
GetDiskFreeSpaceA
GetProcAddress
GetCurrentDirectoryA
GetTempPathA
GetVersionExA
FindNextFileA
SetFileAttributesA
GetFileAttributesA
FindClose
FindFirstFileA
RemoveDirectoryA
CreateDirectoryA
DeleteFileA
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
SetFilePointer
ReadFile
WriteFile
CloseHandle
CreateFileA
SetErrorMode
WaitForSingleObject
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLastError
SetLastError
LocalFree
FormatMessageA
MultiByteToWideChar
FreeLibrary
LoadLibraryA
Sleep
GetExitCodeProcess
CreateProcessA
GetLocalTime
GetTickCount
WideCharToMultiByte
GetModuleFileNameA
EnterCriticalSection

user32

SetWindowTextA
CharUpperA
GetParent
GetWindowRect
GetDesktopWindow
SetWindowPos
GetActiveWindow
PostMessageA
GetWindowLongA
SetWindowLongA
SetParent
IsWindow
DispatchMessageA
TranslateMessage
SendMessageA
PeekMessageA
LoadCursorA
SetCursor
MessageBoxA

shell32

SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA
SHGetDesktopFolder

Exports

Exports

CommandeComposante
DeclareProxy
Execution
FinConversion
GeneralParam
IModifAuto_AjouteFichierLocalisationREP
IModifAuto_AjouteRepertoireLocalisationREP
IModifAuto_DisplayInternalProgressJauge
IModifAuto_GetReport
IModifAuto_RechercheLiaisonAModifier
IModifAuto_RechercheProcedureStockeeAModifier
IModifAuto_ResetReport
IModifAuto_SetAnalyse
IModifAuto_SetAnalyseBuffer
IModifAuto_SetAnalyseEXE
IModifAuto_SetFlagSauvegarde
IModifAuto_SetMdpAnalyse
IModifAuto_SetMdpAnalyseCrypte
IModifAuto_SetModePilotageAuto
IModifAuto_SetModeSansIHM
IModifAuto_SetModifierFichierParNomPhysique
IModifAuto_SetModifierFichierParURL
IModifAuto_SetModifierProcedureStockeeParURL
IModifAuto_SetMotPasseCrypteFinalFichierParNomLogique
IModifAuto_SetMotPasseCrypteOuvertureFichierParNomLogique
IModifAuto_SetMotPasseFinalFichierParNomPhysique
IModifAuto_SetMotPasseFinalFichierParURL
IModifAuto_SetMotPasseOuvertureFichier
IModifAuto_SetMotPasseOuvertureFichierParNomPhysique
IModifAuto_SetMotPasseOuvertureFichierParURL
IModifAuto_SetNomAppli
IModifAuto_SetProgressHandle
IModifAuto_SetRepertoireSauvegarde
IModifAuto_SetRepertoireSauvegardePDA
IModifAuto_SetSauvegardeDansSousRepertoireSource
IModifAuto_bAjouteFichier
IModifAuto_bAjoutePDA
IModifAuto_bAjouteREP
IModifAuto_bAjouteRepertoire
IModifAuto_bAjouteServeur
IModifAuto_bExecute
IModifAuto_bExisteFichierReplique
IModifAuto_bInitReussie
IModifAuto_bModifStructureTrouve
IModifAuto_bSetLanguage
IModifAuto_bSetVerProductCode
IModifAuto_nGetNbFichierAModifier
IModifAuto_nGetNbLiaisonAModifier
IModifAuto_nGetNbProcedureStockee
IModifAuto_nNbFichierRepliqueASynchroniser
IModifAuto_pszGetNomAffichage
IModifAuto_pszGetNomLogiqueFichier
IModifAuto_pszGetNomPhysiqueFichier
IModifAuto_pszGetNomPhysiqueFichierRepliqueASynchroniser
IModifAuto_pszGetReport
IModifAuto_pszGetURLFichier
IModifAuto_pszGetURLProcedureStockee
LibereIModifAuto
bCanCompare
bIsBoolean
bIsString
bNegatif
nAddition
nCommencePar
nComparaison
nConversion
nConversionDepassement
nDivision
nETLogique
nEgalite
nInferieur
nModulo
nMultiplication
nNONLogique
nNegation
nOULogique
nPresqueEgal
nSoupleEgal
nSoustraction
nSuperieur
pCreerIModifAuto
pQueryProxy
wAjoute
wDivise
wModulo
wMultiplie
wSoustrait

Sections

.text
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a7661dfca59b831c7b9036a1e431bff4

Headers

File Characteristics

Imports

msvcrt

mpr

kernel32

user32

shell32

Exports

Exports

Sections

.text Size: 208KB - Virtual size: 204KB

.rdata Size: 96KB - Virtual size: 92KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 1.0MB - Virtual size: 1.0MB

.reloc Size: 24KB - Virtual size: 21KB

.text Size: 176KB - Virtual size: 176KB

.text
Size: 208KB - Virtual size: 204KB

.rdata
Size: 96KB - Virtual size: 92KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

.reloc
Size: 24KB - Virtual size: 21KB

.text
Size: 176KB - Virtual size: 176KB