1383ce3433c6aa8ee3f9fe810bf5288466520db5ba8ba5eb52f03a5eb90f8cae

Sharing

Copy URL Twitter E-mail

General

Target

1383ce3433c6aa8ee3f9fe810bf5288466520db5ba8ba5eb52f03a5eb90f8cae
Size

880KB
MD5

8a2273088f1f8e4c16da1bfc4f424560
SHA1

d815f5217ae502adba31851acd0b55b9a31c7dd1
SHA256

1383ce3433c6aa8ee3f9fe810bf5288466520db5ba8ba5eb52f03a5eb90f8cae
SHA512

cce5fe9ce4221ab6be2b716f1d66eda05c51988c6a24f04d11c1fc131509ff3e91dcd17f0467c1cfa5688a870918a2d0608959139fad9609c67a4594a25f9e91
SSDEEP

24576:KwQ6xL4jGcf6FKI6+J+pwGqmXm25nkCAx:2Df6FKtH5nkCAx

Score

N/A

Malware Config

Signatures

Files

1383ce3433c6aa8ee3f9fe810bf5288466520db5ba8ba5eb52f03a5eb90f8cae
.dll windows x86

f4f98cd3813c5aa2fe1bd8873a719adb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
_vsnprintf
_vsnwprintf
iswspace
_ftol2
wcschr
strrchr
_purecall
??3@YAXPAX@Z
strtoul
strtol
strchr
free
calloc
isspace
iswalpha
malloc
_ltoa
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
memset
atoi
??2@YAPAXI@Z

msoert2

IUnknownList_CreateInstance
IVoidPtrList_CreateInstance
ord27
ord26
ord18
ord21
ord22
ord25
StrTokExA
StrToUintA
PszScanToWhiteA
ord62
ord64
ord65
CreateLogFile
HrEditPhonebookEntryW
HrCreatePhonebookEntry
HrFillRasCombo
ord16
ord46
FBuildTempPathW
ord210
ord211
FIsSpaceA
ord200
UpdateRebarBandColors
ord159
HrCreateTridentMenu
HrCheckTridentMenu
ord42
HrIStreamWToBSTR
FIsHTMLFileW
HrBSTRToLPSZ
HrSetDirtyFlagImpl
HrGetElementImpl
fGetBrowserUrlEncoding
WriteStreamToFileW
HrGetBodyElement
HrGetStyleSheet
GetTopMostParent
CreateDataObject
ord1
HrIsStreamUnicode
GetHtmlCharset
ord201
HrIStreamToBSTR
RicheditStreamIn
GetRichEdClassStringW
SetFontOnRichEd
HrStreamToByte
HrLPSZCPToBSTR
HrRewindStream
HrLPSZToBSTR
RicheditStreamOut
IsValidFileIfFileUrlW
CenterDialog
ord69
PVGetMsgParam
HrGetMsgParam
HrGetCertificateParam
UnlocStrEqNW
PszFromANSIStreamA
ChConvertFromHex
StrToUintW
HrCopyStreamToByte
CreateEnumFormatEtc
HrCopyLockBytesToStream
OpenFileStreamShareW
CchFileTimeToDateTimeW
CchFileTimeToDateTimeSz
StripCRLF
HrGetStreamPos
OpenFileStreamW
HrGetStreamSize
CreateTempFileStream
PVGetCertificateParam
ord160
SzGetCertificateEmailAddress
FMissingCert
CryptAllocFunc
CryptFreeFunc
FIsEmptyA
ReplaceCharsW
CreateTempFileW
AppendTempFileList
WriteStreamToFileHandle
FreeTempFileList
PszSkipWhiteW
PszMonthFromIndex
PszDayFromIndex
PszScanToCharA
HrFindInetTimeZone
BrowseForFolderW
HrIndexOfWeek
HrIndexOfMonth
HrStreamSeekCur
IsUpper
PVDecodeObject
HrDecodeObject
FIsSpaceW
HrSafeGetStreamSize
HrCopyStreamCBEndOnCRLF
FIsEmptyW
CleanupFileNameInPlaceW
PszDupA
CleanupFileNameInPlaceA
HrStreamSeekSet
HrCopyStreamCB
HrCopyStream
PszToANSI
IsDigit
PszAllocA
PszAllocW
PszSkipWhiteA
OpenFileStream
PszDupW
UlStripWhitespaceW
PszToUnicode
FInitializeRichEdit
MessageBoxInstW

shlwapi

StrTrimA
ord217
SHRegCreateUSKeyW
SHRegCloseUSKey
SHStrDupW
AssocQueryKeyW
PathQuoteSpacesW
StrFormatByteSizeW
PathIsContentTypeW
PathIsDirectoryW
StrChrA
PathAppendW
UrlCombineW
PathFileExistsW
StrPBrkW
SHGetValueA
SHSetValueA
ord172
SHSetValueW
SHQueryValueExW
ord199
ord12
ord214
ord212
ord184
wnsprintfW
SHAutoComplete
StrChrW
UrlCanonicalizeW
UrlGetPartW
SHRegGetBoolUSValueA
StrStrIA
PathFindFileNameA
StrToInt64ExW
StrToIntW
StrToInt64ExA
ord153
StrCmpNA
StrDupW
PathCreateFromUrlW
PathRemoveFileSpecW
ord176
StrCmpNIW
ord219
ord154
UrlIsW
ord158
ord157
StrStrA
PathFindFileNameW
PathFindExtensionW
PathFindExtensionA
StrCmpW
StrCmpIW
StrStrW
StrStrIW
ord213
StrCmpNIA
StrToIntA
StrCmpNW

advapi32

GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsA
UnregisterTraceGuids
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
CryptGetProvParam
CryptAcquireContextW
CryptAcquireContextA
CryptDuplicateKey
CryptContextAddRef
CryptSetProvParam
RegEnumKeyExA
RegQueryInfoKeyA
TraceEvent
CryptGenRandom
CryptCreateHash
CryptDestroyHash
CryptHashData
CryptGetHashParam

gdi32

DeleteDC
StretchBlt
BitBlt
SelectObject
CreateDIBSection
CreateCompatibleDC
GetObjectA
SetDIBits
GetDIBits
DeleteObject
GetDeviceCaps
GetTextExtentPoint32W
CreateSolidBrush
SetTextColor
SetBkColor
GetTextMetricsA
RestoreDC
SetBkMode
CreateCompatibleBitmap
SaveDC
GetObjectW
GetStockObject
PatBlt
GetTextExtentPoint32A
GetLayout
ExtTextOutW
Ellipse
Rectangle
EnumFontFamiliesExW
CreateFontIndirectA
EnumFontFamiliesExA
TranslateCharsetInfo

kernel32

GetProcAddress
InterlockedCompareExchange
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
CreateMutexA
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
lstrlenA
lstrcmpiA
IsDBCSLeadByteEx
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetSystemTime
HeapFree
GetProcessHeap
lstrcmpA
GetLastError
GetTimeZoneInformation
GetLocalTime
FileTimeToSystemTime
FileTimeToLocalFileTime
IsDBCSLeadByte
WideCharToMultiByte
GetCurrentThreadId
OpenThread
FormatMessageW
SetErrorMode
GetTimeFormatA
GetDateFormatA
CompareFileTime
ReleaseMutex
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
GetModuleHandleA
GetUserDefaultUILanguage
LoadLibraryW
GetModuleFileNameW
HeapReAlloc
FreeLibraryAndExitThread
GetModuleHandleExW
CreateActCtxA
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
GetSystemWindowsDirectoryA
GetModuleFileNameA
DelayLoadFailureHook
FreeLibrary
CloseHandle
CompareStringW
RemoveDirectoryW
DeleteFileW
GetModuleHandleW
GetACP
IsValidCodePage
GetThreadUILanguage
GetTickCount
CompareStringA
HeapAlloc
LocalFree
LocalAlloc
lstrcmpiW
lstrcmpW
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
LoadLibraryExA
ExpandEnvironmentStringsA
GetSystemDefaultLCID
RtlMoveMemory
GetWindowsDirectoryW
GetExitCodeThread
CreateEventA
WaitForMultipleObjects
SetEvent
CreateThread
GetVersionExA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
QueryPerformanceCounter
Sleep
InterlockedExchange
SetLastError
GetFileAttributesExW
WaitForSingleObject
GetFileAttributesW
SetEndOfFile
GetFileSize
WriteFile
SetFilePointer
ReadFile
GetStringTypeExW
GetLocaleInfoA
CopyFileW
CreateFileW
Beep
MulDiv
MultiByteToWideChar

oleacc

ObjectFromLresult

user32

CharLowerW
CharNextW
CharNextExA
CreateDialogParamA
PeekMessageA
PostQuitMessage
GetWindowThreadProcessId
DialogBoxParamA
SetForegroundWindow
CreateWindowExA
UnregisterClassA
CallWindowProcW
CreatePopupMenu
InsertMenuItemA
GetMenuItemCount
LoadStringW
MessageBoxW
RegisterClipboardFormatA
CharUpperW
SendDlgItemMessageA
LoadStringA
CharLowerA
CharPrevExA
IsWindow
DestroyMenu
RemoveMenu
GetSubMenu
LoadMenuA
ShowWindow
GetDlgItem
SetWindowLongA
EndDialog
IsDlgButtonChecked
CheckRadioButton
GetWindowLongA
GetKeyboardLayoutList
SendMessageA
DrawTextW
SendMessageW
ReleaseDC
GetDC
LoadImageA
GetWindowTextW
SetWindowTextW
EnableWindow
DialogBoxParamW
TrackPopupMenu
GetParent
GetWindowRect
EnableMenuItem
UpdateWindow
InvalidateRect
SetWindowPos
GetSystemMetrics
SetFocus
GetClientRect
PostMessageA
GetScrollInfo
DestroyWindow
GetKeyState
DefWindowProcA
CreateWindowExW
RegisterClassExA
GetSysColorBrush
LoadCursorA
GetClassInfoExA
GetFocus
CallWindowProcA
RegisterWindowMessageA
MapWindowPoints
DeferWindowPos
EndDeferWindowPos
EnableScrollBar
SetScrollInfo
ShowScrollBar
BeginDeferWindowPos
FillRect
GetSysColor
GetWindowTextLengthW
SetScrollPos
ScrollWindow
LoadIconA
RegisterClassW
GetClassInfoW
IsWindowVisible
GetClassNameA
CopyRect
ClientToScreen
DrawTextExW
EndPaint
BeginPaint
TranslateAcceleratorW
LoadAcceleratorsW
SetTimer
KillTimer
GetWindowPlacement
SetWindowPlacement
SetCursor
GetCapture
PostMessageW
SetWindowLongW
CreateDialogParamW
CheckMenuItem
AppendMenuA
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
IsChild
DrawEdge
InflateRect
MessageBeep
SystemParametersInfoA
GetPropA
GetDlgCtrlID
DispatchMessageA
TranslateMessage
GetWindow
CheckMenuRadioItem
GetWindowTextA
GetMenuStringA
GetMenuStringW
MoveWindow
SetPropA
RemovePropA
RegisterClassA
GetClassInfoA
CharNextA
TrackMouseEvent
FrameRect
SetDlgItemTextW
CopyIcon
DestroyIcon
DrawIconEx
GetMenuItemInfoA

Exports

Exports

CreateCommunityTransport
CreateIMAPTransport
CreateIMAPTransport2
CreateNNTPTransport
CreatePOP3Transport
CreateRASTransport
CreateRangeList
CreateSMTPTransport
DllCanUnloadNow
DllGetClassObject
EssContentHintDecodeEx
EssContentHintEncodeEx
EssKeyExchPreferenceDecodeEx
EssKeyExchPreferenceEncodeEx
EssMLHistoryDecodeEx
EssMLHistoryEncodeEx
EssReceiptDecodeEx
EssReceiptEncodeEx
EssReceiptRequestDecodeEx
EssReceiptRequestEncodeEx
EssSecurityLabelDecodeEx
EssSecurityLabelEncodeEx
EssSignCertificateDecodeEx
EssSignCertificateEncodeEx
GetDllMajorVersion
HrAthGetFileName
HrAthGetFileNameW
HrAttachDataFromBodyPart
HrAttachDataFromFile
HrCreateDisplayNameWithSizeForFile
HrDoAttachmentVerb
HrFreeAttachData
HrGetAttachIcon
HrGetAttachIconByFile
HrGetDisplayNameWithSizeForFile
HrGetLastOpenFileDirectory
HrGetLastOpenFileDirectoryW
HrSaveAttachToFile
HrSaveAttachmentAs
MimeEditCreateMimeDocument
MimeEditDocumentFromStream
MimeEditGetBackgroundImageUrl
MimeEditIsSafeToRun
MimeEditViewSource
MimeGetAddressFormatW
MimeOleAlgNameFromSMimeCap
MimeOleAlgStrengthFromSMimeCap
MimeOleClearDirtyTree
MimeOleConvertEnrichedToHTML
MimeOleCreateBody
MimeOleCreateByteStream
MimeOleCreateHashTable
MimeOleCreateHeaderTable
MimeOleCreateMessage
MimeOleCreateMessageParts
MimeOleCreatePropertySet
MimeOleCreateSecurity
MimeOleCreateVirtualStream
MimeOleDecodeHeader
MimeOleEncodeHeader
MimeOleFileTimeToInetDate
MimeOleFindCharset
MimeOleGenerateCID
MimeOleGenerateFileName
MimeOleGenerateMID
MimeOleGetAllocator
MimeOleGetBodyPropA
MimeOleGetBodyPropW
MimeOleGetCertsFromThumbprints
MimeOleGetCharsetInfo
MimeOleGetCodePageCharset
MimeOleGetCodePageInfo
MimeOleGetContentTypeExt
MimeOleGetDefaultCharset
MimeOleGetExtContentType
MimeOleGetFileExtension
MimeOleGetFileInfo
MimeOleGetFileInfoW
MimeOleGetInternat
MimeOleGetPropA
MimeOleGetPropW
MimeOleGetPropertySchema
MimeOleGetRelatedSection
MimeOleInetDateToFileTime
MimeOleObjectFromMoniker
MimeOleOpenFileStream
MimeOleParseMhtmlUrl
MimeOleParseRfc822Address
MimeOleParseRfc822AddressW
MimeOleSMimeCapAddCert
MimeOleSMimeCapAddSMimeCap
MimeOleSMimeCapGetEncAlg
MimeOleSMimeCapGetHashAlg
MimeOleSMimeCapInit
MimeOleSMimeCapRelease
MimeOleSMimeCapsFromDlg
MimeOleSMimeCapsFull
MimeOleSMimeCapsToDlg
MimeOleSetBodyPropA
MimeOleSetBodyPropW
MimeOleSetCompatMode
MimeOleSetDefaultCharset
MimeOleSetPropA
MimeOleSetPropW
MimeOleStripHeaders
MimeOleUnEscapeStringInPlace
MimeOleUnEscapeStringInPlaceW
RichMimeEdit_CreateInstance

Sections

.text
Size: 674KB - Virtual size: 673KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 159KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f4f98cd3813c5aa2fe1bd8873a719adb

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

msoert2

shlwapi

advapi32

gdi32

kernel32

oleacc

user32

Exports

Exports

Sections

.text Size: 674KB - Virtual size: 673KB

.data Size: 13KB - Virtual size: 14KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 28KB - Virtual size: 28KB

.text Size: 159KB - Virtual size: 160KB

.text
Size: 674KB - Virtual size: 673KB

.data
Size: 13KB - Virtual size: 14KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 28KB - Virtual size: 28KB

.text
Size: 159KB - Virtual size: 160KB