d1993a98fedf347c68367f81c0175ba40a21dee2056b21fa26ea2e5e907db677

Sharing

Copy URL Twitter E-mail

General

Target

d1993a98fedf347c68367f81c0175ba40a21dee2056b21fa26ea2e5e907db677
Size

61KB
MD5

82d2c4fc398ca927f2e9ab8b97304c6c
SHA1

308977d55d138308f796b1803b8478473b554e29
SHA256

d1993a98fedf347c68367f81c0175ba40a21dee2056b21fa26ea2e5e907db677
SHA512

4fa3f9a4f49b71cf6ce9c2e7d00b1bce5b42f9d7feb08623b931214b7787ca4624d84503d40c987e86575e75fbcc9716e7e3c3092183d01a24310191379408cd
SSDEEP

1536:XFzHaWLJCnAWIDEvRmemYpfo4/lKCNClOp:41A4RmofoaKeClO

Score

N/A

Malware Config

Signatures

Files

d1993a98fedf347c68367f81c0175ba40a21dee2056b21fa26ea2e5e907db677
.dll windows x86

02eb77751fd14c993c10649d68e8a963

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
SetLastError
OpenMutexA
DeleteFileA
ResetEvent
GlobalAlloc
CloseHandle
HeapFree
WaitForMultipleObjects
TerminateProcess
SuspendThread
lstrlenW
GetComputerNameW
TerminateProcess
MapViewOfFile
GetVersion
TryEnterCriticalSection
VirtualQueryEx
CreateFileMappingW
GetUserDefaultLCID
GetModuleHandleA
FileTimeToLocalFileTime
ReleaseMutex
WaitForSingleObject
UnmapViewOfFile
FindResourceA
UnmapViewOfFile
GetStringTypeExA
GetACP
LocalAlloc
WideCharToMultiByte

comctl32

ImageList_Remove
ImageList_SetBkColor
ImageList_Replace
ImageList_ReplaceIcon
ImageList_LoadImageA

user32

SetForegroundWindow
GetDlgItem
UnionRect
GetWindowPlacement
SetWindowsHookExW
GetWindowLongA
BringWindowToTop
GetScrollRange
ValidateRect
ScrollDC
EmptyClipboard
CharNextA
CharLowerBuffA
TrackPopupMenu
GetMenu
SetFocus
SetCursor
SubtractRect
SetCaretPos
SetWindowLongA
GetClassNameA
GetDoubleClickTime
GetWindowDC
GetWindowLongW
EnumChildWindows
EndPaint
CreateIcon
GetSubMenu
EndDeferWindowPos
SetWindowsHookExA
PostThreadMessageA
CreateCaret
DefWindowProcA
DestroyIcon
CallWindowProcA
RedrawWindow
FrameRect
CallWindowProcW

wininet

InternetOpenUrlA
InternetCrackUrlA
InternetCombineUrlA
FtpOpenFileA

gdi32

RoundRect
RealizePalette
GetStockObject
SetViewportOrgEx
OffsetRgn
GetTextExtentPoint32W
ExcludeClipRect
SetWindowOrgEx
CreateDIBitmap
CreateBrushIndirect
DeleteObject
PatBlt
SetWinMetaFileBits
GetCharABCWidthsA
GetTextColor
SetTextAlign
GetPixel
SetStretchBltMode
CreateBitmap
FrameRgn
GetMapMode
CreateICA
UnrealizeObject

ole32

RegisterDragDrop
CoDisconnectObject

ipv6lass

_Stold
_FCosh
_FExp
_Dscale
_FRteps
_LEps
_Getcvt
_Toupper
_LDenorm
_Cosh
_Nan
_FDscale
_FXbig
_LDtest
_Poly

oleaut32

SysAllocStringByteLen
SysReAllocStringLen

imm32

ImmGetVirtualKey

version

VerQueryValueA

Exports

Exports

ApphelpUpdateCacheEntry
BuildADsPathFromLDAPPath
CreateProcessNotify
DllClientCleanup
blasnsta
GetPermLayers
DllClientStartup
AdsTypeToLdapTypeCopyTime
GetDisplayName
ConvertSidToString
BuildADsPathFromParent
ConvertU2TrusteeToSid
FreeADsStr
GetDefaultServer
FreeObjectInfo
GetLDAPTypeName
AllocADsStr
BuildADsParentPath
BuildADsParentPathFromObjectInfo
GetDomainDNSNameForDomain

Sections

.text
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02eb77751fd14c993c10649d68e8a963

Headers

File Characteristics

Imports

kernel32

comctl32

user32

wininet

gdi32

ole32

ipv6lass

oleaut32

imm32

version

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 56KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 56KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB