fdad37936763a526b42519e5b9944f4cd905733cb526937027258a1c7e67d62d

Sharing

Copy URL

Twitter E-mail

General

Target

fdad37936763a526b42519e5b9944f4cd905733cb526937027258a1c7e67d62d
Size

118KB
MD5

647f3858ab4017748c32f51613ec2f80
SHA1

d0d8a24b3b9be3834c076443483be91b381d5cb0
SHA256

fdad37936763a526b42519e5b9944f4cd905733cb526937027258a1c7e67d62d
SHA512

6845e760790186580c35312630c005cd236a8d2de6d688ccd49cfd72b68693f027a16bcc3c25c0699b700e818f376fe1de6bd75fd877a5d2f482083fee73b7ea
SSDEEP

3072:BzzkZLl0xpB0tJCP2H+9Tid31jC+xDYRMDOKFw2B97KSONCLiA:1t9WxHLxDa2OKFf9NL

Score

N/A

Malware Config

Signatures

Files

fdad37936763a526b42519e5b9944f4cd905733cb526937027258a1c7e67d62d
.dll windows x86

c4ca6da0d17123eb56f4f32b5622a402

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ciw803

ccIntlStrCmp
ccIntlTranslateStr

kernel32

DeleteCriticalSection
lstrcpyA
lstrlenA
InitializeCriticalSection
lstrcmpA
lstrcmpiA
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
FreeLibrary
TerminateProcess
HeapDestroy
GetLocaleInfoW
GetLastError
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetCommandLineA
GetModuleHandleA
GetVersion
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
GetFileType
WriteFile
ExitProcess
GetEnvironmentStrings
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLocaleInfoA
HeapReAlloc
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
VirtualAlloc
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetFilePointer
FlushFileBuffers
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
CloseHandle

user32

CharToOemA
OemToCharBuffA
GetKBCodePage

Exports

Exports

VimMeAdd
VimMeAdminLoggedIn
VimMeAdminName
VimMeCapacity
VimMeChangePassword
VimMeClose
VimMeClosePCX
VimMeCloseSession
VimMeCount
VimMeCreate
VimMeCreatePO
VimMeCurrent
VimMeDestroy
VimMeDestroyPO
VimMeDirCreate
VimMeFaxEnabled
VimMeFileClose
VimMeFileOpen
VimMeFileRead
VimMeFileSeek
VimMeFileSize
VimMeFileSpace
VimMeFileWrite
VimMeFirst
VimMeGetAttribute
VimMeGetAutoReceipt
VimMeGetLastError
VimMeGetProfile
VimMeIsValidAddr
VimMeIsValidSession
VimMeItemClose
VimMeItemGetAttribute
VimMeItemOpen
VimMeItemRead
VimMeItemSeek
VimMeItemSetAttribute
VimMeItemTell
VimMeItemWrite
VimMeLast
VimMeLastReclaimDateTime
VimMeLocate
VimMeLoginSession
VimMeLoginType
VimMeLogoutSession
VimMeMatch
VimMeMove
VimMeMsgLogEnabled
VimMeNext
VimMeOpen
VimMeOpenPCX
VimMeOpenRecips
VimMeOpenRegisteredSession
VimMeOpenServiceSession
VimMeOpenSession
VimMePONeedsReclaim
VimMePostOfficeCreateDate
VimMePostOfficeLifetime
VimMePostOfficeName
VimMePostOfficePath
VimMePrev
VimMeReadPCX
VimMeRefresh
VimMeRefreshNow
VimMeRegisterApp
VimMeRemoteCopy
VimMeSaveDraft
VimMeSeekPCX
VimMeSend
VimMeSetAttribute
VimMeSetAutoReceipt
VimMeSetCriteria
VimMeSetFatalErrorProc
VimMeSetMessageProc
VimMeSetNftErrorProc
VimMeSetProfile
VimMeSetSender
VimMeSetSessionErrorProc
VimMeSetTaskCallBack
VimMeStoreToOutbox
VimMeTellPCX
VimMeTrashEnabled
VimMeType
VimMeUserID
VimMeVerifyOldPassword
VimMeVersion
VimStrCmp
VimStriCmp
getMeBindings
xlateFromPOCPBuf
xlateToPOCPBuf

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4ca6da0d17123eb56f4f32b5622a402

Headers

File Characteristics

Imports

ciw803

kernel32

user32

Exports

Exports

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 9KB - Virtual size: 14KB

.idata Size: 58KB - Virtual size: 57KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 9KB - Virtual size: 14KB

.idata
Size: 58KB - Virtual size: 57KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB