736440812386d7d87b34af8319af55568f049a65fb80c7d1a88460da9bd9f453 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

736440812386d7d87b34af8319af55568f049a65fb80c7d1a88460da9bd9f453
Size

8KB
MD5

e2480a5b9b1793beabbde2291617fc00
SHA1

fd2079025f60948b9f3c9bd6f3d3860f74d7fe71
SHA256

736440812386d7d87b34af8319af55568f049a65fb80c7d1a88460da9bd9f453
SHA512

228069589976e322aa70a9441be3fd9f7e85661b0412a888ef9e9e9b12490d5b702196b92939fe54b903fc1fa1d6812ed672f514cd6b0783bfcf176000ede187
SSDEEP

96:kaVeCtDeG8Ccml2ZOz90cdwHZyaKkIGqUd2ylRflvl:kaVeiDFtnKOzDaKpGqUcylL

Score

N/A

Malware Config

Signatures

Files

736440812386d7d87b34af8319af55568f049a65fb80c7d1a88460da9bd9f453
.dll windows x86

95ab8a47e1090389183ed659a1b1ae5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
lstrcpyA
lstrlenA
Sleep
FindNextFileA
DeleteFileA
FindFirstFileA
VirtualFree
VirtualAlloc
lstrcatA
GetModuleHandleA
CreateProcessA
ReadFile
GetFileSize
OpenFile
OutputDebugStringA
LoadLibraryA
CreateThread
DisableThreadLibraryCalls
GetModuleFileNameA
GetTempPathA
CloseHandle
GetEnvironmentVariableA

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ