94465cc69d8ac2aebffcbba2c91d8120771f8548db9aee87ec609a7a9f3f9a25

Sharing

Copy URL Twitter E-mail

General

Target

94465cc69d8ac2aebffcbba2c91d8120771f8548db9aee87ec609a7a9f3f9a25
Size

63KB
MD5

7a1a8524d8649e066b1e2651a93ef1f8
SHA1

433c5e7d4c8ee3e171cb7d9aed64187a156ce217
SHA256

94465cc69d8ac2aebffcbba2c91d8120771f8548db9aee87ec609a7a9f3f9a25
SHA512

59851e891ea25d31a880a007a424c07dd8dacfa5c7a6b3411083d702971a3d6fe450adbbf9930ce0cb3433f9b371eb8eef68a854e45ad5ef11c51b518d58c813
SSDEEP

1536:7uO3I8rhFQMIy9hBj8gKH4Qi2ixROejy1:7hY8rhlVN2gRLW1

Score

N/A

Malware Config

Signatures

Files

94465cc69d8ac2aebffcbba2c91d8120771f8548db9aee87ec609a7a9f3f9a25
.dll windows x86

b1781398e01fd5b264865bce44eb7dcf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCapture
FindWindowExA
DrawIconEx
SetTimer
DestroyMenu
GetWindowTextA
SetMenuItemInfoW
GetWindowThreadProcessId
GetCaretPos
SetWindowRgn
BringWindowToTop
InvalidateRect
MapVirtualKeyA
DefWindowProcA
EnableWindow
EmptyClipboard
SetScrollPos
HideCaret
IsWindow
ShowWindow
ClientToScreen
GetMenuState
IsWindowEnabled
GetTopWindow
DrawFrameControl
OpenClipboard
SubtractRect
LoadStringW
RedrawWindow
SetKeyboardState
GetIconInfo
SetRect
BeginPaint
ChildWindowFromPointEx
GetClipboardFormatNameA
ValidateRect
GetMessageTime
GetWindowTextW
SetScrollInfo
IsWindowVisible

advapi32

RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
CloseHandle
ResumeThread
GlobalFree
CreateFileW
FlushFileBuffers
LoadLibraryExA
EnumCalendarInfoA
MapViewOfFileEx
SetErrorMode
GetExitCodeThread
ReadFile
GetModuleHandleA
GetModuleFileNameW
TerminateProcess
LoadResource
WaitForMultipleObjects
ReleaseMutex
FindClose
UnmapViewOfFile
WriteFile
GetComputerNameA
SetFilePointer
GetStdHandle
lstrcpynA
CreateFileMappingA
lstrlenW
VirtualQuery
SizeofResource
GlobalSize
SetFileAttributesA
GlobalGetAtomNameA

oleaut32

GetErrorInfo
SetErrorInfo
SafeArrayCreate
SafeArrayCreateVector
SafeArrayUnaccessData

ole32

CoUninitialize
DoDragDrop
CreateDataAdviseHolder
CoInitialize

gdi32

DeleteEnhMetaFile
CreateEnhMetaFileA
GetClipRgn
SaveDC
GetMapMode
GetTextExtentPointA
GetCurrentObject
GetFontLanguageInfo
GetDCOrgEx
LPtoDP
SetBkMode
StretchDIBits
OffsetRgn
SetTextCharacterExtra
DeleteObject
MoveToEx
SetRectRgn
SetPixel
Rectangle
GetTextMetricsA
GetWinMetaFileBits
PolyPolyline
CreateRectRgnIndirect
GetEnhMetaFileBits

comctl32

ImageList_SetIconSize
ImageList_DragEnter
ImageList_DragMove
ImageList_Create

mmutdfmt

_FDenorm
_LXbig
_Rteps
_Dtest
_Stod
_FExp
_Getcvt
_Inf
_FSinh

wininet

InternetConnectA
HttpSendRequestA

comdlg32

GetOpenFileNameA
ChooseColorA
ChooseFontA

imm32

ImmSetCompositionWindow

Exports

Exports

BerBvFree
FreeADsStr
GetPermLayers
ConvertSidToU2Trustee
BuildADsPathFromLDAPPath
CreateProcessNotify
DllClientCleanup
AllocADsStr
FreeObjectInfo
BuildADsPathFromParent
SdbCloseApphelpInformation
GetLDAPTypeName
mshetupn
DllClientStartup
ChangeSeparator
ConvertSidToString
Component
GetDisplayName
ApphelpUpdateCacheEntry
AdsTypeToLdapTypeCopyGeneralizedTime
FindSearchTableIndex
BuildADsParentPath

Sections

.text
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1781398e01fd5b264865bce44eb7dcf

Headers

File Characteristics

Imports

user32

advapi32

kernel32

oleaut32

ole32

gdi32

comctl32

mmutdfmt

wininet

comdlg32

imm32

Exports

Exports

Sections

.text Size: 50KB - Virtual size: 52KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 7KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 50KB - Virtual size: 52KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 7KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 4KB