2626b2da545b6fd6b1c32847fb564930f703258180831d48446e287cb827c159

Sharing

Copy URL Twitter E-mail

General

Target

2626b2da545b6fd6b1c32847fb564930f703258180831d48446e287cb827c159
Size

63KB
MD5

252e247277f66ded8dc5ca4b09f51330
SHA1

3b9d37f39b102e4e71ad1d15e5824bb6fb86e829
SHA256

2626b2da545b6fd6b1c32847fb564930f703258180831d48446e287cb827c159
SHA512

0d137b3f2ba0656893c07fd21e7b94435b991aea0687ef887e5486bae61cca416159886bdf33203186b85c17d54ad0f861dfe18f4749674fcaeeb7489d98add0
SSDEEP

1536:nZkWe1/47O00pwl9PABKJ7h6jLg9ZTK7E:eWe1/lpwf+o9ZTK7

Score

N/A

Malware Config

Signatures

Files

2626b2da545b6fd6b1c32847fb564930f703258180831d48446e287cb827c159
.dll windows x86

8d8db46901b602129b6903e5d5a9a97c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleGetClipboard
CreateDataAdviseHolder
CoCreateInstance
RevokeDragDrop
CoTaskMemAlloc
CoDisconnectObject

kernel32

SetThreadLocale
IsValidLocale
VirtualQuery
GetCPInfo
GetModuleHandleA
UnmapViewOfFile
MapViewOfFileEx
ReleaseMutex
SleepEx
lstrlenW
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
FreeLibrary
lstrcpyA
GetLocaleInfoA
HeapAlloc
TerminateProcess
GetStartupInfoA
GetModuleFileNameW
SetThreadPriority
CloseHandle
GetComputerNameA
WaitForMultipleObjects
UnhandledExceptionFilter

user32

SetCaretPos
SetWindowsHookExW
ChildWindowFromPoint
GetWindow
GetCursorPos
SetWindowPlacement
BeginDeferWindowPos
GetKeyboardType
IsWindowUnicode
UnionRect
GetSystemMenu
RegisterClipboardFormatA
GetDesktopWindow
UnregisterClassW
GetScrollPos
IsDialogMessageA
GetMessagePos
CharUpperA
BringWindowToTop
GetKeyboardLayout
BeginPaint
CharToOemA
GetFocus
GetWindowLongA
CopyImage
GetClassNameA
PostQuitMessage
SetPropA
InsertMenuA
CreateIconIndirect
GetMenuStringW
CreateCaret
MapVirtualKeyW
GetCursor
DrawIcon
RegisterClassW
GetMessageA
ToAscii
IsWindowEnabled
SetMenu
DeferWindowPos

oleaut32

VariantClear
VariantCopyInd
SysAllocStringLen
SafeArrayCreateVector
VariantChangeType
CreateErrorInfo
SafeArrayPutElement

wininet

InternetAttemptConnect
InternetCombineUrlA
InternetOpenA
InternetSetOptionA

gdi32

RectVisible
SetAbortProc
PatBlt
SetPixel
CreateBrushIndirect
StretchBlt
ExtTextOutW
CreateRectRgnIndirect
SetBrushOrgEx
GetNearestColor
CreateFontIndirectA
GetTextExtentPoint32W
UnrealizeObject
CloseEnhMetaFile
LPtoDP
GetPixel
SetBkColor
CreateCompatibleDC
SetBkMode
EndPage

advapi32

RegQueryValueExW
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA

winmm

timeEndPeriod

blacc40u

_LEps
_LSinh
_FDtest
_Denorm

comctl32

ImageList_Destroy

Exports

Exports

CreateProcessNotify
DllClientCleanup
BuildADsParentPathFromObjectInfo
FreeADsStr
autodctr
ApphelpUpdateCacheEntry
GetDefaultServer
DllClientStartup
BuildADsPathFromLDAPPath
ConvertU2TrusteeToSid
BerBvFree
BuildADsParentPath
FreeObjectInfo
ConvertSidToString
AdsTypeToLdapTypeCopyTime
FreeADsMem

Sections

.text
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d8db46901b602129b6903e5d5a9a97c

Headers

File Characteristics

Imports

ole32

kernel32

user32

oleaut32

wininet

gdi32

advapi32

winmm

blacc40u

comctl32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 60KB

.rdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 60KB

.rdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB