8b4468fb2c3b3998030b7513d7201b56da5eb3f6823aaad46d20bcd107734b62

Sharing

Copy URL Twitter E-mail

General

Target

8b4468fb2c3b3998030b7513d7201b56da5eb3f6823aaad46d20bcd107734b62
Size

75KB
MD5

23c68aa8a66df375f4f02a57905dba30
SHA1

fe4d5bc8e22476d6d8c158100fcbea4926525d8d
SHA256

8b4468fb2c3b3998030b7513d7201b56da5eb3f6823aaad46d20bcd107734b62
SHA512

fa787064c4a66160e127230ee28dfcd370231056d23fc10ec647e25ad6206273098d1ddb57448b3d533121957646183443142dacd91d41da86f72a7756d5f0f5
SSDEEP

1536:+mdftL7aGEN1kyqbRPqA2Nk2Yi3kuajj3rS2akXFYr1UlQX:+mfBGkh1C9kwVaj77FYrk

Score

N/A

Malware Config

Signatures

Files

8b4468fb2c3b3998030b7513d7201b56da5eb3f6823aaad46d20bcd107734b62
.exe windows x86

0ceffbca71ee658f506e06db57827849

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ssgui

SSGuiGetHelpFileFromServer
SSGuiAdmInit
SSGuiGetHelpFileFromClient
SSGuiAdmCreate
SSDoAboutBox
?FilterHelpMessages@CHelpHook@@SAHHPAUtagMSG@@@Z
?UnloadCtl3d@CLoad3d@@QAEXXZ
SSGuiAdmFreeParent
?LoadCtl3d@CLoad3d@@QAEHPAUHINSTANCE__@@@Z
SSGuiGetHelpFile
??1CLoad3d@@QAE@XZ
??0CLoad3d@@QAE@XZ

mfc70

ord4985
ord5322
ord2356
ord2546
ord2648
ord4088
ord2529
ord2651
ord2359
ord5002
ord2352
ord3522
ord3523
ord3513
ord2461
ord3751
ord4262
ord4042
ord3140
ord698
ord512
ord2096
ord1013
ord4996
ord977
ord983
ord705
ord3970
ord1017
ord1081
ord1077
ord4349
ord3750
ord4998
ord2741
ord1770
ord3640
ord5152
ord5933
ord4883
ord899
ord3614
ord5339
ord1868
ord1913
ord4107
ord3609
ord5992
ord3814
ord3832
ord3487
ord4248
ord4250
ord2463
ord1097

msvcr70

_except_handler3
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
__security_error_handler
_onexit
__dllonexit
wcscpy
malloc
free
_strdup
__CxxFrameHandler
_setmbcp

kernel32

ExitProcess
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
LoadResource
FindResourceA
GetVersion
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
CompareStringA
lstrlenW
CompareStringW
lstrcmpiA
lstrcmpiW
lstrlenA
GetEnvironmentVariableA
GetEnvironmentVariableW
GetStringTypeExA
GetStringTypeExW
GetProcAddress
LoadLibraryA
LockResource

user32

CharUpperW
CharLowerW
CharLowerA
DeleteMenu
CharUpperA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

oleaut32

SysFreeString

Exports

Exports

??4CLoad3d@@QAEAAV0@ABV0@@Z
?Ctl3dSubclassDlgEx@CLoad3d@@QAEHPAUHWND__@@K@Z
?IsLoaded@CLoad3d@@QAEHXZ

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0ceffbca71ee658f506e06db57827849

Headers

File Characteristics

Imports

ssgui

mfc70

msvcr70

kernel32

user32

advapi32

oleaut32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 3KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 3KB

.rmnet
Size: 56KB - Virtual size: 60KB