d0744ec7cb56f13320c2327fb9a6bd9e676d851375e0fa25c117c8fece2db275

Sharing

Copy URL Twitter E-mail

General

Target

d0744ec7cb56f13320c2327fb9a6bd9e676d851375e0fa25c117c8fece2db275
Size

188KB
MD5

09683c34d53a35d828d6f94df28ea6c0
SHA1

b179323e375cb193fc19a4ff42a4eb7f74a5242c
SHA256

d0744ec7cb56f13320c2327fb9a6bd9e676d851375e0fa25c117c8fece2db275
SHA512

0897c3b6022e66a688db5c9eeb564f9a360198a96728d55a54ae36a60438163d4f2941f18905f893dae2404de03bde866e38695fb854bfb768f4fe21f063d6b5
SSDEEP

3072:Oz6rPiAON8hcgp/WCXXv3RSorzLGwTKmGbpSe6m/eertvP/Z42DLUjlhdbuNcXRl:I6OAOAZXvB7TKXbp6m/jvP/ZhDLULdP3

Score

N/A

Malware Config

Signatures

Files

d0744ec7cb56f13320c2327fb9a6bd9e676d851375e0fa25c117c8fece2db275
.dll windows x86

92aa85494b450110ebcfd60281b3d4ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleCount
SMapLS_IP_EBP_20
SMapLS_IP_EBP_16
SMapLS_IP_EBP_24
SMapLS_IP_EBP_8
MapSL
SUnMapLS_IP_EBP_12
ThunkConnect32
SUnMapLS_IP_EBP_20
SUnMapLS_IP_EBP_16
SUnMapLS_IP_EBP_24
SUnMapLS_IP_EBP_8
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapCreate
HeapDestroy
SMapLS_IP_EBP_12
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer
SetHandleCount
SMapLS_IP_EBP_20
SMapLS_IP_EBP_16
SMapLS_IP_EBP_24
SMapLS_IP_EBP_8
MapSL
SUnMapLS_IP_EBP_12
ThunkConnect32
SUnMapLS_IP_EBP_20
SUnMapLS_IP_EBP_16
SUnMapLS_IP_EBP_24
SUnMapLS_IP_EBP_8
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapCreate
HeapDestroy
SMapLS_IP_EBP_12
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Exports

Exports

GetDbPath
ImportCDImage
ImportCDImageMultiDoc
InitializeNotes
InsertImageToDoc
IsDbDir
IsRequestFromNotes
ListAllDBs
ListAllForms
ListAllRTFields
ListAllServers
TerminateNotes
UmxNotes_ThunkData32

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

92aa85494b450110ebcfd60281b3d4ca

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 1024B - Virtual size: 556B

.data Size: 4KB - Virtual size: 8KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.rmnet Size: 169KB - Virtual size: 172KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 1024B - Virtual size: 556B

.data
Size: 4KB - Virtual size: 8KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.rmnet
Size: 169KB - Virtual size: 172KB