ffd4e9bb5049f3947d86304b643d303704db76a3f24ca551134c91a1d9e2463e

Sharing

Copy URL Twitter E-mail

General

Target

ffd4e9bb5049f3947d86304b643d303704db76a3f24ca551134c91a1d9e2463e
Size

65KB
MD5

7dd19847c801cee65644c557aa8d7c03
SHA1

7a5fa6860b672d7f0211b74c4624ead7c0dbc7ed
SHA256

ffd4e9bb5049f3947d86304b643d303704db76a3f24ca551134c91a1d9e2463e
SHA512

7b7f13fb0a909332cc07cd7f31d57db5cb7833ae06fecf85606661d663b63ab32502d7f8219f0a986d1027723482e39cb22973c2e2277a092c56e2c63da46d26
SSDEEP

1536:NTFJ+OwALXeMlmio3Qz5JZoN/0nek5ZhkKZDudc:ZiMlXoAzpoFavDudc

Score

N/A

Malware Config

Signatures

Files

ffd4e9bb5049f3947d86304b643d303704db76a3f24ca551134c91a1d9e2463e
.dll windows x86

39c20275ff651a13446160d5cd1e95b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetTextColor
ExtTextOutA
StartDocA
GetTextExtentPoint32W
SelectObject
SetPixel
StartDocW
SetPixelV
SetTextColor
DeleteObject
CreateDCA
CreateRectRgn
AbortDoc
SetStretchBltMode
CreateSolidBrush

user32

GetDlgItem
MessageBeep
SetDlgItemTextA
BringWindowToTop
MapWindowPoints
LoadMenuA
DrawIcon
GetClassLongA
GetKeyboardType
CharUpperBuffW
CharLowerW
SystemParametersInfoA
CharUpperA
GetWindowThreadProcessId
DrawFrameControl
GetWindowTextLengthA
GetSubMenu
CreateMDIWindowW
GetWindowTextW
CharUpperBuffA
SetCursorPos
SendMessageW
AppendMenuW
DrawTextW
GetActiveWindow
GetMenuStringA
OffsetRect
EnableWindow
GetSystemMenu
GetClassNameA
CharNextW
RegisterClipboardFormatA
DialogBoxParamW
WaitMessage
ReleaseCapture
RedrawWindow
DestroyIcon
ShowCaret
GetMenuItemID
UnhookWindowsHookEx
GetAsyncKeyState
ScrollWindow
DrawMenuBar
MessageBoxA

kernel32

GetTempPathW
WaitForMultipleObjects
GetACP
MapViewOfFileEx
SetFileTime
UnmapViewOfFile
QueryPerformanceFrequency
FindNextFileW
GetModuleHandleA
DeleteFileA
GetStdHandle
FindFirstFileW
SetCurrentDirectoryW
CreateFileMappingW
VirtualQueryEx
lstrcmpiW
GetLocaleInfoA
GetCurrentDirectoryA
GetLongPathNameW
CloseHandle
FindNextFileA
lstrlenW
GetStringTypeExA
TerminateProcess
_lcreat
GetComputerNameW
CloseHandle
SetFileAttributesA
HeapFree
MulDiv
RtlUnwind
OpenFileMappingA
GlobalSize
VirtualAlloc
GetCurrentThread
GetDriveTypeA
FlushInstructionCache
GetTempFileNameW
CreateMutexA
SetEvent
SetFilePointer
UnmapViewOfFile
MoveFileA
GlobalAlloc
LoadResource
GetFileSizeEx
GetCurrentThreadId
SetFileAttributesW
GetVersionExA
GetFileTime

advapi32

RegOpenKeyA
OpenProcessToken
RegCloseKey
RegSetValueExA
RegSetValueA
RegDeleteKeyA
RegCreateKeyW

dispscli

_FExp
_Stof
_Getcoll
_Stod
_Strcoll
_Xbig
_LSinh
_Dnorm
_Mbrtowc
_LDscale
_Cosh
_LDenorm

winspool

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comctl32

CreateToolbarEx
ImageList_Draw
ImageList_Add
ImageList_SetBkColor
ImageList_ReplaceIcon

comdlg32

ChooseColorA

Exports

Exports

CreateProcessNotify
DllClientCleanup
AllocADsMem
ie4uavaw
SdbCloseApphelpInformation
DllClientStartup
BuildADsParentPath
FreeADsMem
GetDisplayName
FindEntryInSearchTable
BuildADsParentPathFromObjectInfo
FindSearchTableIndex
AdsTypeToLdapTypeCopyGeneralizedTime
BuildLDAPPathFromADsPath
FreeObjectInfo
BuildADsPathFromParent
ConvertSidToU2Trustee
ChangeSeparator
ApphelpUpdateCacheEntry
AllocADsStr
AdsTypeToLdapTypeCopyTime

Sections

.text
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39c20275ff651a13446160d5cd1e95b7

Headers

File Characteristics

Imports

gdi32

user32

kernel32

advapi32

dispscli

winspool

comctl32

comdlg32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 60KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 57KB - Virtual size: 60KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB