1a618544c8b15c8d27c5b793735b309d1e9e158c911ca1ba766d0b0c64b240f3

Sharing

Copy URL Twitter E-mail

General

Target

1a618544c8b15c8d27c5b793735b309d1e9e158c911ca1ba766d0b0c64b240f3
Size

63KB
MD5

93ad92087e7a9f1f9c927afe37966013
SHA1

d19e87c14467775178b97e3c64d37b1154006862
SHA256

1a618544c8b15c8d27c5b793735b309d1e9e158c911ca1ba766d0b0c64b240f3
SHA512

9bb3b9571b52daa2e0dd1b699bbc717c31456aa7234d9478157dc1680d7ec431cf8e770bbb3b1172384d5da87e4e5c68fe4e99ab60ef1dbe5b1ba0d78540027d
SSDEEP

1536:WR7HEtyOw3ERKULpXBgDK6v9ctHolUQU5/ip2uOm:Q7HETuVuXBge6Fu+goG

Score

N/A

Malware Config

Signatures

Files

1a618544c8b15c8d27c5b793735b309d1e9e158c911ca1ba766d0b0c64b240f3
.dll windows x86

d27ad7697fe6a1840140ec84a2f902d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mspmtmsg

_Poly
_FDenorm
_Wcrtomb
_Snan
_FRteps
_FDscale
_FDtest
_LPoly

user32

GetWindowLongA
TrackPopupMenu
LoadIconA
EnableScrollBar
SetScrollRange
GetClassInfoA
GetKeyboardType
CreateIcon
SetDlgItemTextA
SetCapture
SetCursor
WaitMessage
WindowFromPoint
LoadBitmapA
GetMenuStringW
MapVirtualKeyW
WinHelpA
GetClipboardFormatNameA
CopyImage
GetDCEx
GetMessagePos
DeleteMenu
RegisterWindowMessageA
IsDialogMessageA
MessageBoxA
ClipCursor
ShowCursor
GetScrollInfo
EnumChildWindows
LoadCursorA
GetSystemMenu
DestroyMenu
FillRect
CharUpperA
RedrawWindow
DefMDIChildProcA
SetMenuItemInfoW
SetCaretPos

gdi32

EndDoc
GetSystemPaletteEntries
SetRectRgn
DeleteObject
GetEnhMetaFilePaletteEntries
Pie
SetPixelV
IntersectClipRect
SetWinMetaFileBits
GetTextExtentPoint32W
GetTextAlign
CreateCompatibleBitmap
SetDIBColorTable
CreateFontIndirectA
GetBrushOrgEx
RestoreDC
CreateEnhMetaFileA
GdiFlush
CreateCompatibleDC
CreatePalette
GetMapMode

kernel32

FreeLibrary
WaitForMultipleObjects
CompareStringA
GetProcessHeap
ExitProcess
ReleaseMutex
VirtualFree
GetStartupInfoA
InitializeCriticalSection
VirtualQuery
UnmapViewOfFile
GlobalAddAtomA
FileTimeToLocalFileTime
GetCPInfo
TerminateProcess
MapViewOfFile
FindClose
GetThreadPriority
GetDateFormatA
RemoveDirectoryA
ResetEvent
CreateFileMappingW
VirtualQueryEx
CloseHandle
GetFileAttributesW
GetCurrentThread
GetComputerNameW
QueryPerformanceCounter
GetModuleHandleA
LockResource
lstrlenW

ole32

CoTaskMemAlloc
OleDraw
StringFromGUID2
ReleaseStgMedium

wininet

InternetOpenA
InternetAttemptConnect

comctl32

ImageList_SetIconSize
ImageList_Remove
ImageList_DragLeave
ImageList_GetDragImage
ImageList_GetIconSize

shell32

DragFinish
DragQueryFileA

oleaut32

SafeArrayPutElement
SafeArrayGetElement

comdlg32

GetSaveFileNameA

Exports

Exports

FreeObjectInfo
AdsTypeToLdapTypeCopyTime
CreateProcessNotify
GetDisplayName
DllClientCleanup
ChangeSeparator
ntprkmgr
DllClientStartup
FindSearchTableIndex
BuildLDAPPathFromADsPath
BuildADsParentPath
AllocADsStr
ConvertU2TrusteeToSid
BuildADsParentPathFromObjectInfo
GetLDAPTypeName

Sections

.text
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d27ad7697fe6a1840140ec84a2f902d5

Headers

File Characteristics

Imports

mspmtmsg

user32

gdi32

kernel32

ole32

wininet

comctl32

shell32

oleaut32

comdlg32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 60KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 57KB - Virtual size: 60KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB