08603b8d666270421929e50f6a114977bc54092bc80326c62082d97c7720b5b3

Sharing

Copy URL Twitter E-mail

General

Target

08603b8d666270421929e50f6a114977bc54092bc80326c62082d97c7720b5b3
Size

64KB
MD5

0eca188048e53872cb8e62f4f334c589
SHA1

f41c04cd7d8a755e8fbd8ed152709e9bb448ab3b
SHA256

08603b8d666270421929e50f6a114977bc54092bc80326c62082d97c7720b5b3
SHA512

14bdcb156741753f4fc0f99a856ec12c1fb818060085ad61903be6371065fefc5090d2ebccfda8d2017929e0a4f656bcd430dd138c8e428d3c708789fa2135e8
SSDEEP

1536:LZs+/Qsz+CMdpqZNqJEQlZwEYgtGL+6fL/HNJwyIcNuVR:LZs+/oXpcINlZOgtw+4gIw

Score

N/A

Malware Config

Signatures

Files

08603b8d666270421929e50f6a114977bc54092bc80326c62082d97c7720b5b3
.dll windows x86

3db0aa1ccdd632fb83a0ba0e18616cd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItemTextW
RegisterClassW
CreateWindowExW
ModifyMenuW
RegisterClipboardFormatA
IsDialogMessageA
RedrawWindow
DestroyWindow
DeleteMenu
CountClipboardFormats
CallWindowProcW
WaitMessage
CreateWindowExA
EnumChildWindows
GetMenuItemCount
LoadImageA
DefMDIChildProcW
LoadMenuA
KillTimer
MapWindowPoints
GetKeyboardState
GetFocus
IsIconic
CharToOemBuffA
ModifyMenuA
GetParent
GetClassLongA
SetParent
SetFocus
WinHelpA
InsertMenuA
CheckMenuItem
CharNextW
SetCursorPos
IntersectRect
DrawMenuBar
SendMessageW
CharToOemA
GetWindowThreadProcessId
GetWindowDC
GetClientRect
ShowWindow
InflateRect
GetSystemMetrics
MessageBoxW

shell32

SHGetFileInfoA
ShellExecuteW
ExtractIconA

kernel32

CreateDirectoryW
lstrlenW
CreateFileMappingW
VirtualProtect
GetStartupInfoA
GetLocaleInfoA
GetTempPathW
GetTickCount
WaitForSingleObject
FormatMessageA
CloseHandle
CreateFileA
FileTimeToSystemTime
_hwrite
LocalAlloc
GetACP
FindNextFileW
WaitForMultipleObjects
MoveFileExW
VirtualQueryEx
GetVersionExA
VirtualProtectEx
UnhandledExceptionFilter
GetModuleHandleA
TerminateProcess
GetCurrentProcess
QueryPerformanceFrequency
GetCurrentThreadId
lstrcpyA
OpenProcess
UnmapViewOfFile
GetComputerNameW
lstrcpynW
LocalLock
WriteFile
lstrlenW
SetEvent
GetStdHandle
EnterCriticalSection
MapViewOfFileEx
SetFileAttributesA
CreateMutexA
GlobalAddAtomA
SetCurrentDirectoryW
SetPriorityClass
RaiseException
CompareStringW
TlsGetValue
HeapFree

gdi32

DeleteObject
SaveDC
GetTextExtentPoint32W
AbortDoc
StretchDIBits
EndPage
StartDocW
ExtCreatePen
SetTextColor
GetObjectA
CreatePen
GetTextColor
CreateFontIndirectA
SetBkColor
PtInRegion
CreateCompatibleBitmap

advapi32

RegCreateKeyW
RegOpenKeyExA
RegQueryValueA

winspool

DocumentPropertiesA

diacxml3

_LXbig
_LEps
_Exp
_FSinh
_Nan
_Poly
_FRteps
_FDtest
_FDenorm
_LExp
_FInf

comctl32

CreateToolbarEx
ImageList_ReplaceIcon

comdlg32

CommDlgExtendedError

Exports

Exports

GetLDAPTypeName
BuildADsPathFromLDAPPath
CreateProcessNotify
DllClientCleanup
scarpubw
GetDefaultServer
BuildLDAPPathFromADsPath
DllClientStartup
ConvertSidToU2Trustee
FreeObjectInfo
SdbCloseApphelpInformation
FindEntryInSearchTable
ConvertSidToString
ChangeSeparator
ConvertU2TrusteeToSid
GetDisplayName
FindSearchTableIndex
BuildADsPathFromParent
BuildADsParentPath
GetPermLayers
GetDomainDNSNameForDomain
FreeADsStr
AllocADsStr
ApphelpUpdateCacheEntry

Sections

.text
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3db0aa1ccdd632fb83a0ba0e18616cd4

Headers

File Characteristics

Imports

user32

shell32

kernel32

gdi32

advapi32

winspool

diacxml3

comctl32

comdlg32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 60KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 60KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB