a44a6c4c0190f19b69d1179fdec859912a6ec0be6321b836c8a4b6f44aa9c8d7

Sharing

Copy URL Twitter E-mail

General

Target

a44a6c4c0190f19b69d1179fdec859912a6ec0be6321b836c8a4b6f44aa9c8d7
Size

726KB
MD5

f8ba38bc14a1dfb3573b9e21e4a47382
SHA1

0a16b650294f76c20e0c33f3eb0b2187197c853c
SHA256

a44a6c4c0190f19b69d1179fdec859912a6ec0be6321b836c8a4b6f44aa9c8d7
SHA512

cb582cf791ad1fdd5807ea91a71f0f02fd76a88b0aa8301ed88298cc2aa10a1e00fbb7375e05a73bc158b9dad64f2cf25ae0078e874fc1588436d23bf15aaa02
SSDEEP

12288:LtfIwrIZoz7njBXH5qa9yllj9TJVDVG7e/HmTiZmQajH5Y2+b4K5jL0qjzu/8+QN:Zf++BPC1NJVDoiHmTiZm1r5YHxj9HcQN

Score

N/A

Malware Config

Signatures

Files

a44a6c4c0190f19b69d1179fdec859912a6ec0be6321b836c8a4b6f44aa9c8d7
.dll windows x86

73aa91d4deba712ffc300d6da839f1d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegCloseKey

msvcp71

?underflow@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MAEHXZ

msvcr71

__CxxFrameHandler

boost_thread-vc71-mt-1_31

?notify_all@condition_impl@detail@boost@@QAEXXZ

mfc71

ord2168

user32

GetDesktopWindow

gdi32

DeleteDC

shell32

SHBrowseForFolderA

comctl32

ord17

shlwapi

PathRemoveFileSpecA

ws2_32

WSACreateEvent

wininet

InternetReadFileExA

version

GetFileVersionInfoSizeW

iphlpapi

GetBestInterface

winmm

timeGetTime

Exports

Exports

AU_DoAdobeUpdaterWorkflow
XML_DefaultCurrent
XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetFeatureList
XML_GetIdAttributeIndex
XML_GetInputContext
XML_GetSpecifiedAttributeCount
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserCreate_MM
XML_ParserFree
XML_ParserReset
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReturnNSTriplet
XML_SetSkippedEntityHandler
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_UseForeignDTD
XML_UseParserAsHandlerArg

Sections

.text
Size: 658KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

73aa91d4deba712ffc300d6da839f1d7

Headers

File Characteristics

Imports

kernel32

advapi32

msvcp71

msvcr71

boost_thread-vc71-mt-1_31

mfc71

user32

gdi32

shell32

comctl32

shlwapi

ws2_32

wininet

version

iphlpapi

winmm

Exports

Exports

Sections

.text Size: 658KB - Virtual size: 3.4MB

.rsrc Size: 66KB - Virtual size: 68KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 658KB - Virtual size: 3.4MB

.rsrc
Size: 66KB - Virtual size: 68KB

.reloc
Size: 512B - Virtual size: 4KB