3c0832c2403869f0f6c502acefc2ad8f435641bf4dd8dddfef8f2a6d0c6e2e4d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c0832c2403869f0f6c502acefc2ad8f435641bf4dd8dddfef8f2a6d0c6e2e4d
Size

8KB
MD5

4c33b460dc32cef7db624d0ce9ad7580
SHA1

70e7bab07facecb28dadd70acf5b4f83f7b12b2d
SHA256

3c0832c2403869f0f6c502acefc2ad8f435641bf4dd8dddfef8f2a6d0c6e2e4d
SHA512

5783900631fc1b2cfae3d7c45e825edda75dc061ce188925e803e0aa5cff3df84fd1229ef2098238b58c69b54fa425285f8077e005ee3504f4fa268c2a9ff047
SSDEEP

96:mNtCV0DELfrt2BlsO/aKkIGUkUdFCfQlH:sh6fwLvaKpGRUnnl

Score

N/A

Malware Config

Signatures

Files

3c0832c2403869f0f6c502acefc2ad8f435641bf4dd8dddfef8f2a6d0c6e2e4d
.dll windows x86

79ac8afdb26717c9399d07593687258f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
lstrcpyA
lstrlenA
Sleep
FindNextFileA
DeleteFileA
FindFirstFileA
VirtualFree
VirtualAlloc
GetModuleHandleA
GetEnvironmentVariableA
CreateProcessA
ReadFile
GetFileSize
OpenFile
OutputDebugStringA
LoadLibraryA
CreateThread
DisableThreadLibraryCalls
GetModuleFileNameA
GetTempPathA
CloseHandle
lstrcatA

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ