bcb0147aa61161092631b8353d5f8e42419f74066f6504d200b69805e211587c

Sharing

Copy URL Twitter E-mail

General

Target

bcb0147aa61161092631b8353d5f8e42419f74066f6504d200b69805e211587c
Size

380KB
MD5

95356be6461d41b4cb97c771c51ddd90
SHA1

78820565cabf1f5058a3cc22093feb0d1c39bb8e
SHA256

bcb0147aa61161092631b8353d5f8e42419f74066f6504d200b69805e211587c
SHA512

f4228ee9499d57e1e2c2c5b84207338de856acf6e652196b802eba162730178833c32f1e54c3d8feb6d35733cf6ea8d67a12ae214ecca9303f4e2f354e9f8e96
SSDEEP

6144:jTZzMo77aSyki8AOfQZfpt0oZ+pHUryHJzBsrN8O+nLTHdtRRKKcGPP0hZwGRFYg:jSo8oIZfpGpHEypzoN8vnLzTKKV3eZlh

Score

N/A

Malware Config

Signatures

Files

bcb0147aa61161092631b8353d5f8e42419f74066f6504d200b69805e211587c
.dll windows x86

c703c1692fa4b8c04fd675d6d7bf4e38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

user32

wsprintfW
TranslateMessage
SetWindowTextA
PeekMessageA
GetWindowThreadProcessId
GetClassNameA
EnumWindows
EnumChildWindows
DispatchMessageA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

dbghelp

ImageNtHeader
SymEnumSourceFiles
SymEnumSymbols
SymFindFileInPath
SymGetTypeInfo
SymInitialize
SymCleanup

msvcrt

system
strtoul
strrchr
strncmp
strchr
sqrt
sprintf
realloc
rand
printf
memset
mbtowc
malloc
localeconv
isxdigit
iswprint
isupper
isspace
isdigit
isalpha
gmtime
fputws
fprintf
ferror
fclose
calloc
atoi
_wspawnle
_wrmdir
wcstoul
_wcsicmp
_tzset
_strupr
_strtime
_strrev
_strnicmp
_strlwr
_stricmp
_snprintf
_read
_purecall
_onexit
_lseeki64
_lock
_itoa
_ismbclegal
_ismbblead
_isatty
_iob
_initterm
_flsbuf
_fileno
_expand
_execlp
_atoi64
_amsg_exit
__pioinfo
__p__pctype
__mb_cur_max
__dllonexit
__badioinfo
wcsstr
wcsrchr
wcsncpy
wcsncmp
wcschr
tmpnam
_write
time
strtol

kernel32

DebugBreak
EnterCriticalSection
ExitProcess
FileTimeToLocalFileTime
CreateFileMappingA
FindClose
FindFirstFileA
FindResourceA
FormatMessageA
FreeLibrary
CreateDirectoryA
CompareFileTime
FileTimeToSystemTime
lstrlenW
lstrlenA
lstrcmpA
WriteFile
WinExec
WideCharToMultiByte
VirtualFreeEx
VirtualAllocEx
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TlsAlloc
TerminateProcess
SystemTimeToFileTime
SetUnhandledExceptionFilter
SetLastError
SetFilePointer
SetCommMask
SearchPathA
RtlUnwind
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MapViewOfFile
LockResource
LocalFree
LoadResource
LoadLibraryA
IsBadStringPtrA
IsBadReadPtr
InterlockedExchange
InterlockedCompareExchange
HeapFree
HeapAlloc
GetVersionExW
GetVersionExA
GetVersion
GetTickCount
GetSystemTimeAsFileTime
GetSystemTime
GetProcessWorkingSetSize
GetProcessPriorityBoost
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
GetLastError
GetFileSize
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCommandLineA
GetCommConfig
GetCPInfo
CloseHandle

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegCloseKey

Exports

Exports

DopplerFactor
MapADSTypeToLDAPType
SetAutoCADFilesColorScheme
SetJ2KOptions
UVAtlasPack

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c703c1692fa4b8c04fd675d6d7bf4e38

Headers

File Characteristics

Imports

version

user32

ole32

dbghelp

msvcrt

kernel32

advapi32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 76KB

.rdata Size: 182KB - Virtual size: 182KB

.data Size: 68KB - Virtual size: 69KB

.rsrc Size: 46KB - Virtual size: 46KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 76KB - Virtual size: 76KB

.rdata
Size: 182KB - Virtual size: 182KB

.data
Size: 68KB - Virtual size: 69KB

.rsrc
Size: 46KB - Virtual size: 46KB

.reloc
Size: 5KB - Virtual size: 5KB