d99b2ff88c2dc678f50b6cb78bb0f1a2801565abf918c3f4362f2f6280ce72a5

General

Target

d99b2ff88c2dc678f50b6cb78bb0f1a2801565abf918c3f4362f2f6280ce72a5
Size

311KB
MD5

0469f4789062509ac9860d48ad9140a0
SHA1

cc5891e5cf34cf78d3f733d72cd1b39dc7880120
SHA256

d99b2ff88c2dc678f50b6cb78bb0f1a2801565abf918c3f4362f2f6280ce72a5
SHA512

08c65430cffedb9f71b4fcee9d853df025fb296d52b054e59642c18aa467bd842f7555c60b8224f89dc8e6f8a50d47c2c728c5140003f2acfb6345897d5bda56
SSDEEP

6144:O0fBZE5s8YQDgR1+UJpKPVD4m6MU8t/38TMhAXWBuO+BQwfxYVy:FYDgZwPVb6MU8tfckvi7fx6y

Score

N/A

Malware Config

Signatures

Files

d99b2ff88c2dc678f50b6cb78bb0f1a2801565abf918c3f4362f2f6280ce72a5
.exe windows x86

18101aff2b4bd9c82e26b3e45f23d6d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTraceEnableLevel
RegisterTraceGuidsW
RegQueryValueExW
RegEnumKeyExW
GetTraceEnableFlags
RegDeleteValueW
GetTraceLoggerHandle
TraceMessage
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW

kernel32

LeaveCriticalSection
GetProcAddress
QueryPerformanceCounter
InterlockedDecrement
FindResourceW
SetLastError
lstrcpyW
GetSystemTimeAsFileTime
VirtualFree
DeleteCriticalSection
GetLastError
FreeLibrary
SetUnhandledExceptionFilter
GetCurrentProcess
IsValidCodePage
GetUserDefaultLCID
GetProcessHeap
MultiByteToWideChar
FormatMessageW
LocalFree
LoadLibraryA
GlobalAlloc
SizeofResource
lstrcatW
EnterCriticalSection
GetCurrentProcessId
HeapFree
FlushInstructionCache
GetTickCount
lstrlenW
LoadLibraryExW
GetSystemInfo
HeapDestroy
lstrcmpiW
InterlockedIncrement
HeapAlloc
LoadLibraryW
lstrlenA
lstrcpynW
LoadResource
GetModuleFileNameW
OutputDebugStringA

user32

GetWindow
GetDlgItemTextW
CharNextW
MapWindowPoints
GetParent
EnableWindow
DialogBoxParamW
CopyRect
SystemParametersInfoW
EndDialog
SetWindowLongW
DestroyWindow
LoadStringW
LoadImageW
GetWindowLongW
ShowWindow
SendMessageW
SetDlgItemTextW
SetFocus
CreateDialogParamW
SendDlgItemMessageW
GetDlgItem
GetSystemMetrics
GetDialogBaseUnits
GetClientRect
SetWindowPos
GetWindowRect
DrawTextW
SetWindowTextW
MessageBoxW

wldap32

ldap_controls_freeW
ldap_count_references
ldap_count_entries

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 155KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18101aff2b4bd9c82e26b3e45f23d6d3

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

wldap32

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 155KB - Virtual size: 231KB

.rsrc Size: 30KB - Virtual size: 29KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 155KB - Virtual size: 231KB

.rsrc
Size: 30KB - Virtual size: 29KB