de989f1aa73f0768d49be509df8c78a3cd46193398ed8036b58dec520b719a02

Sharing

Copy URL Twitter E-mail

General

Target

de989f1aa73f0768d49be509df8c78a3cd46193398ed8036b58dec520b719a02
Size

62KB
MD5

126e2e782eb0551d99db9fd1cb65c1d7
SHA1

a93320faddc222c798f5e929544e473c1890bce0
SHA256

de989f1aa73f0768d49be509df8c78a3cd46193398ed8036b58dec520b719a02
SHA512

0d9de2efc6209f9f789c0c2ca30f424ec5b0c1751908a9bf42fa5c0e18dcac49cc37de28346c2fa3fb0f02ea683cbe255d4afda7e8d298b2f6a659d2ef1626c7
SSDEEP

1536:INESE175SEgnOOWxNWvetRnQkkisxAk6wEPNqE:I9E175uBWnWvkhQssxAk6vc

Score

N/A

Malware Config

Signatures

Files

de989f1aa73f0768d49be509df8c78a3cd46193398ed8036b58dec520b719a02
.dll windows x86

3848fa7d33f11f03d9d9db6d264a9ce0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCapture
GetMenuItemInfoW
SendDlgItemMessageA
SendNotifyMessageA
SetClipboardData
EndDeferWindowPos
DrawTextA
SetMenuItemInfoW
UnionRect
DrawIcon
GetCapture
GetDC
TrackPopupMenu
MessageBoxA
GetDlgItem
CharToOemA
UnhookWindowsHookEx
CharUpperA
UpdateWindow
MsgWaitForMultipleObjects
GetMenuItemInfoA
SendMessageA
DrawIconEx
UnpackDDElParam
ScrollWindow
EnumChildWindows
SetRectEmpty
IsDialogMessageA
GetCursor
EmptyClipboard
MessageBeep
SetTimer
SubtractRect
BringWindowToTop
GetKeyNameTextW
OemToCharA
GetScrollInfo
LoadCursorA
CloseClipboard
IsWindowVisible
CharUpperBuffA
SetActiveWindow
IsChild
LockWindowUpdate

kernel32

RaiseException
CreateProcessA
HeapFree
TerminateProcess
FileTimeToLocalFileTime
MapViewOfFileEx
MulDiv
SetFilePointer
FindResourceA
lstrlenA
CreateFileMappingA
OutputDebugStringA
GetCurrentThreadId
GlobalFindAtomA
GetFileAttributesW
GetTimeZoneInformation
CompareStringW
LocalAlloc
LocalFree
SleepEx
GetTempPathA
GetTickCount
GlobalReAlloc
GetFileType
GetProcAddress
GetDateFormatA
GetModuleHandleA
VirtualQuery
LeaveCriticalSection
GetLocalTime
IsValidLocale
CloseHandle
lstrlenW
InitializeCriticalSection
UnmapViewOfFile
WaitForMultipleObjects
GetFileSize
GetComputerNameA

winmm

timeBeginPeriod

oleaut32

SafeArrayPtrOfIndex
VariantCopyInd
SysAllocStringLen
SafeArrayGetUBound

gdi32

RestoreDC
SetTextCharacterExtra
SetTextAlign
CreateFontIndirectA
StartDocA
ExtCreatePen
GetClipRgn
PolyPolyline
SetWinMetaFileBits
SetBrushOrgEx
GetCurrentPositionEx
SetRectRgn
GetTextMetricsA
GetDCOrgEx
StartPage
DeleteDC
GetStockObject
SetPixelV

wininet

InternetOpenA
InternetQueryOptionA
InternetCrackUrlA
InternetOpenUrlA

ole32

ReleaseStgMedium
CoTaskMemAlloc
CoUninitialize

advapi32

RegQueryValueExA
GetUserNameA
RegDeleteKeyA

ftsrfmap

_Stof
_Stod
_FSinh
_LEps
_Stold

shell32

ShellExecuteExA

comctl32

ImageList_DragShowNolock

imm32

ImmSetCompositionWindow

Exports

Exports

AllocADsStr
ConvertSidToU2Trustee
CreateProcessNotify
FindSearchTableIndex
AllocADsMem
DllClientCleanup
asr_open
DllClientStartup
GetDomainDNSNameForDomain
BuildADsPathFromParent
BuildLDAPPathFromADsPath
BuildADsPathFromLDAPPath
BuildADsParentPathFromObjectInfo
ConvertU2TrusteeToSid
FindEntryInSearchTable
GetDisplayName
AdsTypeToLdapTypeCopyGeneralizedTime
ChangeSeparator
ApphelpUpdateCacheEntry
GetLDAPTypeName
SdbCloseApphelpInformation
BerBvFree
Component
GetDefaultServer
ConvertSidToString

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3848fa7d33f11f03d9d9db6d264a9ce0

Headers

File Characteristics

Imports

user32

kernel32

winmm

oleaut32

gdi32

wininet

ole32

advapi32

ftsrfmap

shell32

comctl32

imm32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 56KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 1KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 53KB - Virtual size: 56KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB