d0327a3ea39a8543a1655ff778413cf768fad1b42b4c333cffb7ad3a3f53ee7a

Sharing

Copy URL Twitter E-mail

General

Target

d0327a3ea39a8543a1655ff778413cf768fad1b42b4c333cffb7ad3a3f53ee7a
Size

63KB
MD5

7f2987853e99cf2a877fbe5feb59000b
SHA1

2bda173287a5329c72eaa611c11d6417fbbf8dc0
SHA256

d0327a3ea39a8543a1655ff778413cf768fad1b42b4c333cffb7ad3a3f53ee7a
SHA512

bc70ab1f41479e299256a0a6251f25902a08d57ef89ceb301f35484b246bff178ab67448694e28c73930e06aa9c50eebed919d38c43787ef8145e0df70c25788
SSDEEP

768:W8zYLAuu4bS+L9ftnTAbV8jGHFslXvpAfKKVlJHWTN6owGwb5YNfDiJ0I6WxbE:WUg5FL5ROejq2XvpS5/GwmRrI6WZE

Score

N/A

Malware Config

Signatures

Files

d0327a3ea39a8543a1655ff778413cf768fad1b42b4c333cffb7ad3a3f53ee7a
.dll windows x86

a9e0fadadc63f8b508ba54626ac27ca0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
RtlUnwind
GetTempPathA
UnmapViewOfFile
GetModuleFileNameW
ReleaseMutex
DeleteFileA
LocalAlloc
ResetEvent
OpenFileMappingA
CreateProcessA
TerminateProcess
SleepEx
SizeofResource
GetTempFileNameA
GlobalDeleteAtom
CloseHandle
CreateMutexA
CompareStringW
WaitForMultipleObjects
LeaveCriticalSection
GetComputerNameA
MapViewOfFileEx
lstrlenA
FormatMessageA
RaiseException
GetModuleHandleA
GetFileSize
CreateFileMappingA
lstrlenW
FindFirstFileA
GetUserDefaultLCID
TerminateThread
VirtualAlloc
VirtualFree
GetExitCodeProcess
SetEndOfFile
GlobalGetAtomNameA

gdi32

CloseEnhMetaFile
DeleteDC
Pie
SetMapMode
GetWindowOrgEx
LineTo
GetStockObject
SaveDC
CreateSolidBrush
GetTextMetricsA
GetObjectA
GetEnhMetaFileDescriptionA
TextOutA
Polyline
OffsetClipRgn
GetClipBox
FrameRgn
CopyEnhMetaFileA
GetNearestColor

user32

MapWindowPoints
GetWindowTextA
DefMDIChildProcA
DefFrameProcA
LoadIconA
GetWindowTextLengthW
RemoveMenu
FillRect
ScrollDC
CharUpperW
GetWindowPlacement
GetKeyboardLayout
SendDlgItemMessageA
InsertMenuA
GetCapture
PostThreadMessageA
UnregisterClassW
IsWindow
SetForegroundWindow
GetWindow
DispatchMessageA
LoadBitmapA
DrawEdge
ScrollWindow
ShowOwnedPopups
GetClassNameA
GetKeyboardLayoutList
GetTopWindow
GetSystemMenu
ChildWindowFromPointEx
GetCaretPos
RedrawWindow
FrameRect
DestroyMenu
GetLastActivePopup
InvalidateRect
SetMenu
SetScrollRange
CallNextHookEx
DeferWindowPos
DefWindowProcW

mprmeui

_Eps
_Strcoll
_Stof
_Snan
_Strxfrm
_Dtest
_FSnan
_Getctype

comdlg32

FindTextA
ChooseColorA

wininet

HttpQueryInfoA
InternetReadFile
InternetCrackUrlA

oleaut32

SafeArrayGetLBound
VariantCopy
CreateErrorInfo
VariantClear
SetErrorInfo
SafeArrayUnaccessData

advapi32

RegDeleteValueA
RegDeleteKeyA
RegFlushKey

comctl32

ImageList_GetDragImage
ImageList_SetIconSize

imm32

ImmSetCompositionWindow

version

GetFileVersionInfoSizeA

shell32

ShellExecuteA

ole32

OleSetMenuDescriptor
OleSetClipboard

Exports

Exports

AdsTypeToLdapTypeCopyTime
GetDisplayName
CreateProcessNotify
DllClientCleanup
ConvertU2TrusteeToSid
GetPermLayers
AllocADsMem
AdsTypeToLdapTypeCopyGeneralizedTime
FindSearchTableIndex
attrsfc
DllClientStartup
GetLDAPTypeName
ConvertSidToU2Trustee
BuildADsParentPathFromObjectInfo
ConvertSidToString
GetDefaultServer
AllocADsStr
FreeObjectInfo
SdbCloseApphelpInformation
BuildADsPathFromLDAPPath
BerBvFree

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9e0fadadc63f8b508ba54626ac27ca0

Headers

File Characteristics

Imports

kernel32

gdi32

user32

mprmeui

comdlg32

wininet

oleaut32

advapi32

comctl32

imm32

version

shell32

ole32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 56KB

.rdata Size: 4KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 53KB - Virtual size: 56KB

.rdata
Size: 4KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 4KB