0c1568daec7f9a5c531b28dd962a8ac1da0279de082e7e2c211b1eb9da2f9f15

Sharing

Copy URL Twitter E-mail

General

Target

0c1568daec7f9a5c531b28dd962a8ac1da0279de082e7e2c211b1eb9da2f9f15
Size

127KB
MD5

6d163ebd5643bc4ebd0dc4048f94e554
SHA1

f2664f57977406c41b67e849d316571cdca715c1
SHA256

0c1568daec7f9a5c531b28dd962a8ac1da0279de082e7e2c211b1eb9da2f9f15
SHA512

f1f02c03a74e95f8fa072a98f82581261415a0d011aa564a37410aa7d6e7caa6ca9b46d02b3afee2c5ab577cdbdcf8e1e4e94e3fc55da16c4d0438900eb64d14
SSDEEP

3072:ehr6i0OI7cG5ylX2KgFf/CFJu52Xc3WGSo+1eNy9P/w:ehriOIhQt2f/au52XuWR6qP4

Score

N/A

Malware Config

Signatures

Files

0c1568daec7f9a5c531b28dd962a8ac1da0279de082e7e2c211b1eb9da2f9f15
.dll windows x86

ae40d48742fda2b8d5bbf829cfa5f579

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClipboardData
CloseClipboard
CharLowerA
SetClipboardData
OpenClipboard
LoadStringA

kernel32

GetWindowsDirectoryA
GlobalUnlock
GlobalLock
GetModuleFileNameA
GlobalFree
GlobalAlloc
lstrlenA
lstrcmpA
lstrcmpiA
GlobalReAlloc
GetVersionExA
LoadResource
FindResourceA
LockResource
FreeResource
GlobalSize
GlobalFlags
lstrcpyA
GlobalHandle
lstrcatA
FreeLibrary
LoadLibraryA
GetProfileStringA
ReadFile
SetFilePointer
WriteFile
CloseHandle
CreateFileA
GetTempFileNameA
GetTempPathA
MoveFileA
DeleteFileA
GetShortPathNameA
GetFullPathNameA
FindClose
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindFirstFileA
SystemTimeToFileTime
GetSystemTime
DosDateTimeToFileTime
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
LocalFileTimeToFileTime
MultiByteToWideChar
SetFileTime
SetErrorMode
GetLastError
GetDiskFreeSpaceA
GetCurrentDirectoryA
GetLogicalDrives
GetEnvironmentStrings
GetCommandLineA
GetVersion
VirtualFree
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
ExitProcess
GetStdHandle
GetFileType
GetStartupInfoA
SetStdHandle
FlushFileBuffers
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
SetEndOfFile

advapi32

RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA

ole32

StgSetTimes

mpr

WNetCancelConnectionA
WNetAddConnectionA

Exports

Exports

ABdivC
CFFormat
CFInstallSFM
CFUninstallSFM
DBAppend
DBCallBack
DBFile
DBHeap
DBPort
DBPrintf
DBVPrintf
EndTranslation
FMBufAllowBuffering
FMBufInitReqParms
FMBufRequestBuffering
FMBufSetDfltBuffering
FMCheckAccess
FMClose
FMCopy
FMCopyEx
FMCreateSpec
FMCreateTempName
FMDelete
FMExtractDirectory
FMFileExists
FMFileHasExt
FMFlush
FMFullName
FMGetDiskFreeSpace
FMGetEOF
FMGetPhysSize
FMGetRootPathName
FMISetTime
FMInstall
FMLocateExt
FMLocateName
FMNewToOld
FMOpen
FMOpenCreate
FMRead
FMRename
FMSameFile
FMSeek
FMSeqRead
FMSeqWrite
FMSetEOF
FMSysTime
FMTell
FMTime
FMTransFSpec
FMUninstall
FMWInitFS
FMWrite
FileSpec5to6
FormatDateTime
LABdivCpZ
LzwCmClose
LzwCmOpen
LzwCmStrip
LzwDeChunk
LzwDeClose
LzwDeOpen
MFHandle
MFInstallSFM
MFUninstallSFM
MMAllocLargest
MMGetPointer
MMGlobalFixAlloc
MMGlobalFixFree
MMGlobalFixReAlloc
MMResizeHandle
StartTranslation
SwapBitField
TransFileSpec
TransText
VDICheckFile
VMBuildLangPath
VMErrorStr
VMFreeDLLResHdl
VMGetDLLResHdl
VMGetSystemVersion
VMRevision
VMSetDLLLanguage
addABC
lsprintf
lvsprintf
swapb
swapw
vmemcmp
vmemcpy
vmemset
vrGetItLockIt
vrGetResource
vrGetShortInt
vrLoadString
vrLockResource
vrUnlockResource
vstrcat
vstrcmp
vstrcmpi
vstrcpy
vstrlen
vstrncmp
vstrncmpi
vstrncpy
vwordset

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae40d48742fda2b8d5bbf829cfa5f579

Headers

File Characteristics

Imports

user32

kernel32

advapi32

ole32

mpr

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.bss Size: - Virtual size: 7KB

.rdata Size: 512B - Virtual size: 88B

.data Size: 5KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 2KB

.edata Size: 54KB - Virtual size: 54KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 59KB

.bss
Size: - Virtual size: 7KB

.rdata
Size: 512B - Virtual size: 88B

.data
Size: 5KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 54KB - Virtual size: 54KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB