9fec0eda81892830c4a84fb8ef641f9200c9ec592139a24748b2f38477945d4d

Sharing

Copy URL Twitter E-mail

General

Target

9fec0eda81892830c4a84fb8ef641f9200c9ec592139a24748b2f38477945d4d
Size

60KB
MD5

7e11e8d5e45d659dda1c981674f5a4ec
SHA1

0528bdd3379606fbb8d3fdf827e3f351611f274e
SHA256

9fec0eda81892830c4a84fb8ef641f9200c9ec592139a24748b2f38477945d4d
SHA512

6e4c83a8bec1c061d09b93ae28e420d20b29f36cc17943e60ea3a7462c3ff299730be074e3a30884c61821d97bcfb3cbdc0f6c3ee060f05325d6f3fd37de43aa
SSDEEP

1536:NNLtC/G1iB6B0qnWEh2qBgRRBGaaO65c/:DI/GQzRyaaFi

Score

N/A

Malware Config

Signatures

Files

9fec0eda81892830c4a84fb8ef641f9200c9ec592139a24748b2f38477945d4d
.dll windows x86

73c7e7e9c95bd28be07da1eff3280e8a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostMessageA
GetClassInfoW
GetMessageA
ReleaseCapture
ShowCaret
LockWindowUpdate
ValidateRect
GetWindowRect
EmptyClipboard
SetMenuItemInfoW
ScrollDC
GetWindowTextA
GetMenuItemCount
GetWindowThreadProcessId
IsCharAlphaNumericA
GetSysColor
GetWindowTextLengthW
SetScrollInfo
CreatePopupMenu
DispatchMessageA
IsWindow
LoadKeyboardLayoutA
DeleteMenu
CallNextHookEx
CreateWindowExA
LoadIconA
GetMenuItemID
PeekMessageA
EqualRect
SetWindowPos
GetScrollRange
DestroyCursor
GetUpdateRect
ActivateKeyboardLayout
GetSubMenu
GetCapture
DrawFrameControl
PostThreadMessageA
GetComboBoxInfo
SetWindowPlacement
EndPaint
IsIconic
SetWindowsHookExW
MapVirtualKeyA
UnionRect
CallWindowProcA

kernel32

OpenProcess
RtlUnwind
GetACP
GlobalSize
CreateFileMappingA
lstrlenW
CreateProcessA
VirtualQuery
UnhandledExceptionFilter
GetComputerNameA
GetDateFormatA
CreateDirectoryA
CloseHandle
WaitForMultipleObjects
FindFirstFileA
SetEndOfFile
LoadLibraryW
VirtualAlloc
GetSystemTime
LockResource
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingA
SetLastError
GetCurrentProcess
GetModuleHandleA
MapViewOfFile
TerminateProcess
CreateFileA

winmm

PlaySoundA

oleaut32

VariantClear
VariantCopy
SysFreeString
SafeArrayUnaccessData

presoclc

_FSnan
_LSnan
_Getcvt
_FRteps
_FInf
_FDnorm
_FExp

gdi32

CreateFontIndirectA
SaveDC
GetFontLanguageInfo
CombineRgn
CopyEnhMetaFileA
CreateSolidBrush
GetBkColor
EndPage
EndDoc
EnumFontsA
SelectClipRgn
TextOutA
ExtTextOutW
GetTextMetricsA
GetTextAlign
StretchBlt
SetBrushOrgEx
PolyPolyline
BitBlt
GetCharABCWidthsA
GetTextExtentPointA
GetDIBColorTable

ole32

IsAccelerator
StringFromGUID2
CoDisconnectObject
OleInitialize

advapi32

SetSecurityDescriptorDacl
RegCreateKeyExA

wininet

InternetErrorDlg
InternetQueryOptionA

imm32

ImmReleaseContext
ImmGetVirtualKey

comctl32

ImageList_SetIconSize
ImageList_GetIcon
ImageList_BeginDrag
ImageList_SetDragCursorImage
ImageList_Write
ImageList_GetIconSize

comdlg32

ChooseFontA

shell32

ShellExecuteExA

Exports

Exports

CreateProcessNotify
DllClientCleanup
audivert
DllClientStartup
ApphelpUpdateCacheEntry
BuildLDAPPathFromADsPath
ConvertSidToString
FreeADsMem
AdsTypeToLdapTypeCopyGeneralizedTime
AllocADsMem
FindSearchTableIndex
BuildADsPathFromParent
SdbCloseApphelpInformation
AllocADsStr
BerBvFree
FreeADsStr

Sections

.text
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73c7e7e9c95bd28be07da1eff3280e8a

Headers

File Characteristics

Imports

user32

kernel32

winmm

oleaut32

presoclc

gdi32

ole32

advapi32

wininet

imm32

comctl32

comdlg32

shell32

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 48KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 7KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 47KB - Virtual size: 48KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 7KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 4KB