4a84f6eb73aabc621e0f57ca17e23536636f68822b6c6df20b75d57b039382a3

Sharing

Copy URL Twitter E-mail

General

Target

4a84f6eb73aabc621e0f57ca17e23536636f68822b6c6df20b75d57b039382a3
Size

58KB
MD5

e5604617e57b62e046d85997bf3e1c70
SHA1

243de0775cec20108e756c50e5af49d06965804f
SHA256

4a84f6eb73aabc621e0f57ca17e23536636f68822b6c6df20b75d57b039382a3
SHA512

44a4c0dc8dd0a6bd2646be4ced8191e489a74afe4a7113a1f62acd86c26020785564b374f7b0b1f60f356b988facd3ccd95267f82182c6fdc0c9ae6cf533695c
SSDEEP

1536:CNknBqr14hD6SXSaMtqOWnFrWcvhxDt34l5RHxn:CO0U2SiapOWnFrWmhxDtU5RHxn

Score

N/A

Malware Config

Signatures

Files

4a84f6eb73aabc621e0f57ca17e23536636f68822b6c6df20b75d57b039382a3
.dll windows x86

41c3b2c539e62c62bdbbeed1bb688ffc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyCaret
LoadStringA
GetCursorPos
GetKeyNameTextA
SetClipboardData
GetScrollRange
GetWindowDC
MapVirtualKeyA
SetClassLongA
ClientToScreen
GetClassInfoA
GetMenuState
PostMessageW
SetTimer
GetMessageTime
SetPropA
MoveWindow
LockWindowUpdate
OemToCharA
SetScrollInfo
IsChild
SetWindowsHookExA
CreateIconIndirect
GetWindowRect
GetCapture
ChildWindowFromPoint
UnhookWindowsHookEx
SetActiveWindow
GetMenu
DrawIcon
CharLowerBuffA
DrawEdge
PostMessageA
TranslateMDISysAccel
SetMenu
GetMenuItemID
EnumWindows
ScrollWindow
EnumThreadWindows

wininet

InternetCloseHandle
FtpOpenFileA
InternetConnectA
InternetSetOptionA

mspbsapi

_Dnorm
_FCosh
_Tolower
_Nan

gdi32

GetTextColor
CreateBrushIndirect
SetBkColor
CreateDIBitmap
PolyPolyline
GetTextMetricsA
LPtoDP
GetCurrentPositionEx
Ellipse
CreateBitmap
EnumFontsA
TextOutA
GetPaletteEntries
SelectPalette
OffsetRgn
MaskBlt
CreateICA
SetViewportExtEx
CreatePalette
SetEnhMetaFileBits
ExtCreatePen
GetFontLanguageInfo
Polygon
GetClipRgn
CopyEnhMetaFileA
LineTo

kernel32

GetModuleHandleA
GetProfileStringA
WaitForMultipleObjects
GlobalLock
CreateFileMappingA
VirtualFree
GetSystemTime
SetThreadLocale
FileTimeToDosDateTime
lstrcpynA
GetFullPathNameA
GetTimeZoneInformation
FlushInstructionCache
MapViewOfFileEx
lstrlenA
CloseHandle
lstrlenW
GetComputerNameA
GetModuleFileNameA
SetFileAttributesA
GetLastError
TerminateProcess
VirtualQuery
IsValidCodePage
UnmapViewOfFile

shell32

SHGetSpecialFolderPathA
SHBrowseForFolderA
ShellExecuteExA

comctl32

ImageList_Read
ImageList_GetDragImage
ImageList_SetIconSize
ImageList_SetBkColor
ImageList_Remove
ImageList_Draw

advapi32

RegEnumKeyExA
RegSetValueExA
RegFlushKey

winmm

timeGetTime
PlaySoundA

ole32

CoGetClassObject
CoUninitialize

oleaut32

GetActiveObject
SysAllocStringByteLen
VariantChangeType

Exports

Exports

AdsTypeToLdapTypeCopyTime
FreeADsStr
GetDomainDNSNameForDomain
ConvertSidToU2Trustee
BuildLDAPPathFromADsPath
CreateProcessNotify
AdsTypeToLdapTypeCopyGeneralizedTime
AllocADsMem
GetDefaultServer
AllocADsStr
GetDisplayName
BuildADsParentPath
FreeADsMem
DllClientCleanup
ApphelpUpdateCacheEntry
Component
javadsvr
DllClientStartup
SdbCloseApphelpInformation
BerBvFree
BuildADsPathFromLDAPPath
FindEntryInSearchTable
BuildADsParentPathFromObjectInfo
ConvertSidToString
BuildADsPathFromParent
GetLDAPTypeName
FreeObjectInfo
GetPermLayers

Sections

.text
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41c3b2c539e62c62bdbbeed1bb688ffc

Headers

File Characteristics

Imports

user32

wininet

mspbsapi

gdi32

kernel32

shell32

comctl32

advapi32

winmm

ole32

oleaut32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 56KB

.rdata Size: 4KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 56KB

.rdata
Size: 4KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 4KB