b310781adba3a761b0f403d88e9ed9b47291f623dd6e637bd393a671082b8b1d

Sharing

Copy URL Twitter E-mail

General

Target

b310781adba3a761b0f403d88e9ed9b47291f623dd6e637bd393a671082b8b1d
Size

136KB
MD5

2887b31afe2a44f0d4c58540fd1d27e7
SHA1

8951294ac26d227240520fb09f18a4f8f97b0049
SHA256

b310781adba3a761b0f403d88e9ed9b47291f623dd6e637bd393a671082b8b1d
SHA512

16c556af57afa4bcc4e5e28e85ea7ffc5361bec61c69e80a38137601819701b31a143d750d03dd3717b1a1644b3e6b560ae62047765d68a217d1479f84bea1c8
SSDEEP

3072:SeW0jAt21HxVcqStffpA/g1SfjXB9tRaUA7gDxRV:w00g1HxV+tfyIcjffag

Score

N/A

Malware Config

Signatures

Files

b310781adba3a761b0f403d88e9ed9b47291f623dd6e637bd393a671082b8b1d
.dll windows x86

885c2c62259fecdb1564b6f930798c32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CloseHandle
CreateEventA
SetEvent
LeaveCriticalSection
GlobalFree
GetProcAddress
lstrcpyA
GetModuleFileNameA
EnterCriticalSection
FreeLibrary
MultiByteToWideChar
LoadLibraryA
GlobalLock
GlobalAlloc
lstrcatA
lstrcmpA
lstrlenA
MulDiv
InitializeCriticalSection
GetVersion
DeleteCriticalSection
GlobalHandle
GlobalSize
GlobalFlags
SetErrorMode
OpenFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringW
LCMapStringA
VirtualAlloc
WriteFile
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetStdHandle
GetFileType
SetHandleCount
VirtualFree
HeapCreate
HeapDestroy
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
HeapAlloc
TlsGetValue
SetLastError
TlsFree
TlsAlloc
GetCurrentThreadId
HeapFree
GetModuleHandleA
GetCommandLineA
GetDriveTypeA
GetFullPathNameA
SetCurrentDirectoryA
GetLocaleInfoW
GlobalUnlock
SetEnvironmentVariableA
ExitThread
GetCurrentDirectoryA
CreateThread
GetLastError
TlsSetValue
ResumeThread

user32

SetRect

gdi32

DeleteObject
GetPaletteEntries

ltkrn13n

ord241
ord123
ord148
ord128
ord171
ord193
ord266
ord108
ord112
ord238
ord237
ord135
ord276
ord272
ord271
ord274
ord133
ord174
ord100
ord183
ord155
ord131
ord287
ord279
ord140
ord232
ord236
ord141
ord234
ord230
ord134
ord231
ord158
ord173
ord156
ord154
ord221
ord214
ord129
ord101
ord219
ord122
ord215
ord169
ord163
ord161
ord152
ord121
ord162
ord203
ord210
ord243
ord189
ord191
ord190
ord196
ord188
ord284
ord194
ord179
ord138
ord137
ord116
ord151
ord125
ord285
ord282
ord283
ord273
ord246
ord247
ord267
ord265
ord280

Exports

Exports

DllMain
L_2DGetViewMode
L_2DGetViewport
L_2DSetViewMode
L_2DSetViewport
L_CompressBuffer
L_CreateThumbnailFromFile
L_DecompressBuffer
L_DeletePage
L_DocFeedLoad
L_DocLoadFile
L_DocLoadMemory
L_DocSaveFile
L_DocSaveMemory
L_DocStartFeedLoad
L_DocStopFeedLoad
L_EndCompressBuffer
L_FeedLoad
L_FileConvert
L_FileInfo
L_FileInfoMemory
L_FreeExtensions
L_GetAutoCADFilesColorScheme
L_GetComment
L_GetDefaultJ2KOptions
L_GetDefaultLoadFileOption
L_GetDefaultSaveFileOption
L_GetExtensionAudio
L_GetFileCommentSize
L_GetJ2KOptions
L_GetLoadInfoCallbackData
L_GetLoadResolution
L_GetPCDResolution
L_GetPDFOptions
L_GetPLTOptions
L_GetSaveResolution
L_GetTag
L_GetWMFResolution
L_IgnoreFilters
L_LoadBitmap
L_LoadBitmapList
L_LoadBitmapMemory
L_LoadBitmapResize
L_LoadCustomFile
L_LoadExtensionStamp
L_LoadFile
L_LoadFileOffset
L_LoadFileTile
L_LoadLayer
L_LoadMemory
L_LoadMemoryTile
L_PreLoadFilters
L_ReadFileComment
L_ReadFileCommentExt
L_ReadFileCommentMemory
L_ReadFileExtensions
L_ReadFileStamp
L_ReadFileTag
L_ReadFileTagMemory
L_ReadFileTransforms
L_ReadLoadResolutions
L_SaveBitmap
L_SaveBitmapBuffer
L_SaveBitmapList
L_SaveBitmapMemory
L_SaveBitmapWithLayers
L_SaveCustomFile
L_SaveData
L_SaveFile
L_SaveFileBuffer
L_SaveFileMemory
L_SaveFileOffset
L_SaveFileTile
L_SetAutoCADFilesColorScheme
L_SetComment
L_SetJ2KOptions
L_SetLoadInfoCallback
L_SetLoadResolution
L_SetPCDResolution
L_SetPDFOptions
L_SetPLTOptions
L_SetSaveResolution
L_SetTag
L_SetWMFResolution
L_StartCompressBuffer
L_StartDecompressBuffer
L_StartFeedLoad
L_StartRedirectMemory
L_StartRedirectOffset
L_StartSaveData
L_StartSaveRedirectMemory
L_StopDecompressBuffer
L_StopFeedLoad
L_StopRedirectMemory
L_StopRedirectOffset
L_StopSaveData
L_TransformFile
L_VecFeedLoad
L_VecLoadFile
L_VecLoadMemory
L_VecSaveFile
L_VecSaveMemory
L_VecStartFeedLoad
L_VecStopFeedLoad
L_WriteFileComment
L_WriteFileCommentExt
L_WriteFileStamp
L_WriteFileTag
L_WriteFileTransforms

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

885c2c62259fecdb1564b6f930798c32

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ltkrn13n

Exports

Exports

Sections

.text Size: 102KB - Virtual size: 101KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 13KB - Virtual size: 32KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 102KB - Virtual size: 101KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 13KB - Virtual size: 32KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 7KB