3b43782944e83135e4494076087d22ed222841236c0c31dfabaa07bc21e0f5f8

Sharing

Copy URL Twitter E-mail

General

Target

3b43782944e83135e4494076087d22ed222841236c0c31dfabaa07bc21e0f5f8
Size

127KB
MD5

2eb20454a9fb82504bfab19eb5fa2a77
SHA1

30a184e337f21348a2b661e49e772fd35543eb63
SHA256

3b43782944e83135e4494076087d22ed222841236c0c31dfabaa07bc21e0f5f8
SHA512

5510dbedd0d9a49d51f98f142c2990ca8d0e583c759073fc10461d5304b383395953485424ded2910c59156ad2c453b765a4440f1c91cdf8fd7a779b6694e771
SSDEEP

3072:ehr6i0OI7cG5ylX2KgFf/CFJu52Xc3WGSo+1eNy9P/w:ehriOIhQt2f/au52XuWR6qP4

Score

N/A

Malware Config

Signatures

Files

3b43782944e83135e4494076087d22ed222841236c0c31dfabaa07bc21e0f5f8
.dll windows x86

ae40d48742fda2b8d5bbf829cfa5f579

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClipboardData
CloseClipboard
CharLowerA
SetClipboardData
OpenClipboard
LoadStringA

kernel32

GetWindowsDirectoryA
GlobalUnlock
GlobalLock
GetModuleFileNameA
GlobalFree
GlobalAlloc
lstrlenA
lstrcmpA
lstrcmpiA
GlobalReAlloc
GetVersionExA
LoadResource
FindResourceA
LockResource
FreeResource
GlobalSize
GlobalFlags
lstrcpyA
GlobalHandle
lstrcatA
FreeLibrary
LoadLibraryA
GetProfileStringA
ReadFile
SetFilePointer
WriteFile
CloseHandle
CreateFileA
GetTempFileNameA
GetTempPathA
MoveFileA
DeleteFileA
GetShortPathNameA
GetFullPathNameA
FindClose
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindFirstFileA
SystemTimeToFileTime
GetSystemTime
DosDateTimeToFileTime
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
LocalFileTimeToFileTime
MultiByteToWideChar
SetFileTime
SetErrorMode
GetLastError
GetDiskFreeSpaceA
GetCurrentDirectoryA
GetLogicalDrives
GetEnvironmentStrings
GetCommandLineA
GetVersion
VirtualFree
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
ExitProcess
GetStdHandle
GetFileType
GetStartupInfoA
SetStdHandle
FlushFileBuffers
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
SetEndOfFile

advapi32

RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA

ole32

StgSetTimes

mpr

WNetCancelConnectionA
WNetAddConnectionA

Exports

Exports

ABdivC
CFFormat
CFInstallSFM
CFUninstallSFM
DBAppend
DBCallBack
DBFile
DBHeap
DBPort
DBPrintf
DBVPrintf
EndTranslation
FMBufAllowBuffering
FMBufInitReqParms
FMBufRequestBuffering
FMBufSetDfltBuffering
FMCheckAccess
FMClose
FMCopy
FMCopyEx
FMCreateSpec
FMCreateTempName
FMDelete
FMExtractDirectory
FMFileExists
FMFileHasExt
FMFlush
FMFullName
FMGetDiskFreeSpace
FMGetEOF
FMGetPhysSize
FMGetRootPathName
FMISetTime
FMInstall
FMLocateExt
FMLocateName
FMNewToOld
FMOpen
FMOpenCreate
FMRead
FMRename
FMSameFile
FMSeek
FMSeqRead
FMSeqWrite
FMSetEOF
FMSysTime
FMTell
FMTime
FMTransFSpec
FMUninstall
FMWInitFS
FMWrite
FileSpec5to6
FormatDateTime
LABdivCpZ
LzwCmClose
LzwCmOpen
LzwCmStrip
LzwDeChunk
LzwDeClose
LzwDeOpen
MFHandle
MFInstallSFM
MFUninstallSFM
MMAllocLargest
MMGetPointer
MMGlobalFixAlloc
MMGlobalFixFree
MMGlobalFixReAlloc
MMResizeHandle
StartTranslation
SwapBitField
TransFileSpec
TransText
VDICheckFile
VMBuildLangPath
VMErrorStr
VMFreeDLLResHdl
VMGetDLLResHdl
VMGetSystemVersion
VMRevision
VMSetDLLLanguage
addABC
lsprintf
lvsprintf
swapb
swapw
vmemcmp
vmemcpy
vmemset
vrGetItLockIt
vrGetResource
vrGetShortInt
vrLoadString
vrLockResource
vrUnlockResource
vstrcat
vstrcmp
vstrcmpi
vstrcpy
vstrlen
vstrncmp
vstrncmpi
vstrncpy
vwordset

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae40d48742fda2b8d5bbf829cfa5f579

Headers

File Characteristics

Imports

user32

kernel32

advapi32

ole32

mpr

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.bss Size: - Virtual size: 7KB

.rdata Size: 512B - Virtual size: 88B

.data Size: 5KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 2KB

.edata Size: 54KB - Virtual size: 54KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 59KB

.bss
Size: - Virtual size: 7KB

.rdata
Size: 512B - Virtual size: 88B

.data
Size: 5KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 54KB - Virtual size: 54KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB