c85290d0fb5e2f184e3f82473e0559a92224e57087b658fab40ec70cec2e3332

Sharing

Copy URL Twitter E-mail

General

Target

c85290d0fb5e2f184e3f82473e0559a92224e57087b658fab40ec70cec2e3332
Size

64KB
MD5

f68dbdd5b2ee11e8d99b71409680c5fb
SHA1

6bfd10b63ff9d3a754d912fc5c73dbd59355e086
SHA256

c85290d0fb5e2f184e3f82473e0559a92224e57087b658fab40ec70cec2e3332
SHA512

555c521f165caeeef46f038fa059d6cc67c6bb9043f7a2ae41da2c02b6e193157ffb72abe1edff74e0c435571fac9a8e7d9ffd4af0145d1869e27bab7dba3e8f
SSDEEP

1536:LZs+/Qsz+CMdpqZNqJEQlZwEYgtGL+6fL/HNJwyIcNuVR:LZs+/oXpcINlZOgtw+4gIw

Score

N/A

Malware Config

Signatures

Files

c85290d0fb5e2f184e3f82473e0559a92224e57087b658fab40ec70cec2e3332
.dll windows x86

3db0aa1ccdd632fb83a0ba0e18616cd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItemTextW
RegisterClassW
CreateWindowExW
ModifyMenuW
RegisterClipboardFormatA
IsDialogMessageA
RedrawWindow
DestroyWindow
DeleteMenu
CountClipboardFormats
CallWindowProcW
WaitMessage
CreateWindowExA
EnumChildWindows
GetMenuItemCount
LoadImageA
DefMDIChildProcW
LoadMenuA
KillTimer
MapWindowPoints
GetKeyboardState
GetFocus
IsIconic
CharToOemBuffA
ModifyMenuA
GetParent
GetClassLongA
SetParent
SetFocus
WinHelpA
InsertMenuA
CheckMenuItem
CharNextW
SetCursorPos
IntersectRect
DrawMenuBar
SendMessageW
CharToOemA
GetWindowThreadProcessId
GetWindowDC
GetClientRect
ShowWindow
InflateRect
GetSystemMetrics
MessageBoxW

shell32

SHGetFileInfoA
ShellExecuteW
ExtractIconA

kernel32

CreateDirectoryW
lstrlenW
CreateFileMappingW
VirtualProtect
GetStartupInfoA
GetLocaleInfoA
GetTempPathW
GetTickCount
WaitForSingleObject
FormatMessageA
CloseHandle
CreateFileA
FileTimeToSystemTime
_hwrite
LocalAlloc
GetACP
FindNextFileW
WaitForMultipleObjects
MoveFileExW
VirtualQueryEx
GetVersionExA
VirtualProtectEx
UnhandledExceptionFilter
GetModuleHandleA
TerminateProcess
GetCurrentProcess
QueryPerformanceFrequency
GetCurrentThreadId
lstrcpyA
OpenProcess
UnmapViewOfFile
GetComputerNameW
lstrcpynW
LocalLock
WriteFile
lstrlenW
SetEvent
GetStdHandle
EnterCriticalSection
MapViewOfFileEx
SetFileAttributesA
CreateMutexA
GlobalAddAtomA
SetCurrentDirectoryW
SetPriorityClass
RaiseException
CompareStringW
TlsGetValue
HeapFree

gdi32

DeleteObject
SaveDC
GetTextExtentPoint32W
AbortDoc
StretchDIBits
EndPage
StartDocW
ExtCreatePen
SetTextColor
GetObjectA
CreatePen
GetTextColor
CreateFontIndirectA
SetBkColor
PtInRegion
CreateCompatibleBitmap

advapi32

RegCreateKeyW
RegOpenKeyExA
RegQueryValueA

winspool

DocumentPropertiesA

diacxml3

_LXbig
_LEps
_Exp
_FSinh
_Nan
_Poly
_FRteps
_FDtest
_FDenorm
_LExp
_FInf

comctl32

CreateToolbarEx
ImageList_ReplaceIcon

comdlg32

CommDlgExtendedError

Exports

Exports

GetLDAPTypeName
BuildADsPathFromLDAPPath
CreateProcessNotify
DllClientCleanup
packsort
GetDefaultServer
BuildLDAPPathFromADsPath
DllClientStartup
ConvertSidToU2Trustee
FreeObjectInfo
SdbCloseApphelpInformation
FindEntryInSearchTable
ConvertSidToString
ChangeSeparator
ConvertU2TrusteeToSid
GetDisplayName
FindSearchTableIndex
BuildADsPathFromParent
BuildADsParentPath
GetPermLayers
GetDomainDNSNameForDomain
FreeADsStr
AllocADsStr
ApphelpUpdateCacheEntry

Sections

.text
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3db0aa1ccdd632fb83a0ba0e18616cd4

Headers

File Characteristics

Imports

user32

shell32

kernel32

gdi32

advapi32

winspool

diacxml3

comctl32

comdlg32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 60KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 60KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB