a97bbb138fd9f42e9ec6f08f8f57b5f3892eb710726f7b28bbb19333b2d23cea

Sharing

Copy URL Twitter E-mail

General

Target

a97bbb138fd9f42e9ec6f08f8f57b5f3892eb710726f7b28bbb19333b2d23cea
Size

62KB
MD5

55fb9847fc8cbe4ab8712bba780a4800
SHA1

953ae11da7366ee218a0e2bc86df2f97770d6178
SHA256

a97bbb138fd9f42e9ec6f08f8f57b5f3892eb710726f7b28bbb19333b2d23cea
SHA512

a099f9050a4a59e2212c21f7261d5cf97c85a1c543ba485a2973d026fc0b29c847d4a09963188289a2337c44be884f51854deef80a15a0f92774f692b7a08d13
SSDEEP

1536:INESE175SEgnOOWxNWvetRnQkkisxAk6wEPNAE:I9E175uBWnWvkhQssxAk6vK

Score

N/A

Malware Config

Signatures

Files

a97bbb138fd9f42e9ec6f08f8f57b5f3892eb710726f7b28bbb19333b2d23cea
.dll windows x86

3848fa7d33f11f03d9d9db6d264a9ce0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCapture
GetMenuItemInfoW
SendDlgItemMessageA
SendNotifyMessageA
SetClipboardData
EndDeferWindowPos
DrawTextA
SetMenuItemInfoW
UnionRect
DrawIcon
GetCapture
GetDC
TrackPopupMenu
MessageBoxA
GetDlgItem
CharToOemA
UnhookWindowsHookEx
CharUpperA
UpdateWindow
MsgWaitForMultipleObjects
GetMenuItemInfoA
SendMessageA
DrawIconEx
UnpackDDElParam
ScrollWindow
EnumChildWindows
SetRectEmpty
IsDialogMessageA
GetCursor
EmptyClipboard
MessageBeep
SetTimer
SubtractRect
BringWindowToTop
GetKeyNameTextW
OemToCharA
GetScrollInfo
LoadCursorA
CloseClipboard
IsWindowVisible
CharUpperBuffA
SetActiveWindow
IsChild
LockWindowUpdate

kernel32

RaiseException
CreateProcessA
HeapFree
TerminateProcess
FileTimeToLocalFileTime
MapViewOfFileEx
MulDiv
SetFilePointer
FindResourceA
lstrlenA
CreateFileMappingA
OutputDebugStringA
GetCurrentThreadId
GlobalFindAtomA
GetFileAttributesW
GetTimeZoneInformation
CompareStringW
LocalAlloc
LocalFree
SleepEx
GetTempPathA
GetTickCount
GlobalReAlloc
GetFileType
GetProcAddress
GetDateFormatA
GetModuleHandleA
VirtualQuery
LeaveCriticalSection
GetLocalTime
IsValidLocale
CloseHandle
lstrlenW
InitializeCriticalSection
UnmapViewOfFile
WaitForMultipleObjects
GetFileSize
GetComputerNameA

winmm

timeBeginPeriod

oleaut32

SafeArrayPtrOfIndex
VariantCopyInd
SysAllocStringLen
SafeArrayGetUBound

gdi32

RestoreDC
SetTextCharacterExtra
SetTextAlign
CreateFontIndirectA
StartDocA
ExtCreatePen
GetClipRgn
PolyPolyline
SetWinMetaFileBits
SetBrushOrgEx
GetCurrentPositionEx
SetRectRgn
GetTextMetricsA
GetDCOrgEx
StartPage
DeleteDC
GetStockObject
SetPixelV

wininet

InternetOpenA
InternetQueryOptionA
InternetCrackUrlA
InternetOpenUrlA

ole32

ReleaseStgMedium
CoTaskMemAlloc
CoUninitialize

advapi32

RegQueryValueExA
GetUserNameA
RegDeleteKeyA

ftsrfmap

_Stof
_Stod
_FSinh
_LEps
_Stold

shell32

ShellExecuteExA

comctl32

ImageList_DragShowNolock

imm32

ImmSetCompositionWindow

Exports

Exports

AllocADsStr
ConvertSidToU2Trustee
CreateProcessNotify
FindSearchTableIndex
AllocADsMem
DllClientCleanup
ntvdript
DllClientStartup
GetDomainDNSNameForDomain
BuildADsPathFromParent
BuildLDAPPathFromADsPath
BuildADsPathFromLDAPPath
BuildADsParentPathFromObjectInfo
ConvertU2TrusteeToSid
FindEntryInSearchTable
GetDisplayName
AdsTypeToLdapTypeCopyGeneralizedTime
ChangeSeparator
ApphelpUpdateCacheEntry
GetLDAPTypeName
SdbCloseApphelpInformation
BerBvFree
Component
GetDefaultServer
ConvertSidToString

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3848fa7d33f11f03d9d9db6d264a9ce0

Headers

File Characteristics

Imports

user32

kernel32

winmm

oleaut32

gdi32

wininet

ole32

advapi32

ftsrfmap

shell32

comctl32

imm32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 56KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 1KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 53KB - Virtual size: 56KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB