a5f5aefa4f43585fd113c577e6b01e8827e07b1a521c6d25de8ab93795853925

Sharing

Copy URL Twitter E-mail

General

Target

a5f5aefa4f43585fd113c577e6b01e8827e07b1a521c6d25de8ab93795853925
Size

59KB
MD5

955e43694c0fd9f89140a9fb6a11efd0
SHA1

e375c5b81952485b8a7480137f013585372f40c1
SHA256

a5f5aefa4f43585fd113c577e6b01e8827e07b1a521c6d25de8ab93795853925
SHA512

eb81a4cba8014214f627316f7c1279ce45c9d82bcd167cb6e15a49bbafa8a01295d10d383ab0a59a9718af6b2d0e4c32acebc6ac436d053f7b061c0ddb611534
SSDEEP

768:W8zYLAuu4bS+L9ftnTAbV8jGHFslXvpAfKKVlJHWTN6owGwb5YNfDiJ0I6Wx:WUg5FL5ROejq2XvpS5/GwmRrI6W

Score

N/A

Malware Config

Signatures

Files

a5f5aefa4f43585fd113c577e6b01e8827e07b1a521c6d25de8ab93795853925
.dll windows x86

a9e0fadadc63f8b508ba54626ac27ca0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
RtlUnwind
GetTempPathA
UnmapViewOfFile
GetModuleFileNameW
ReleaseMutex
DeleteFileA
LocalAlloc
ResetEvent
OpenFileMappingA
CreateProcessA
TerminateProcess
SleepEx
SizeofResource
GetTempFileNameA
GlobalDeleteAtom
CloseHandle
CreateMutexA
CompareStringW
WaitForMultipleObjects
LeaveCriticalSection
GetComputerNameA
MapViewOfFileEx
lstrlenA
FormatMessageA
RaiseException
GetModuleHandleA
GetFileSize
CreateFileMappingA
lstrlenW
FindFirstFileA
GetUserDefaultLCID
TerminateThread
VirtualAlloc
VirtualFree
GetExitCodeProcess
SetEndOfFile
GlobalGetAtomNameA

gdi32

CloseEnhMetaFile
DeleteDC
Pie
SetMapMode
GetWindowOrgEx
LineTo
GetStockObject
SaveDC
CreateSolidBrush
GetTextMetricsA
GetObjectA
GetEnhMetaFileDescriptionA
TextOutA
Polyline
OffsetClipRgn
GetClipBox
FrameRgn
CopyEnhMetaFileA
GetNearestColor

user32

MapWindowPoints
GetWindowTextA
DefMDIChildProcA
DefFrameProcA
LoadIconA
GetWindowTextLengthW
RemoveMenu
FillRect
ScrollDC
CharUpperW
GetWindowPlacement
GetKeyboardLayout
SendDlgItemMessageA
InsertMenuA
GetCapture
PostThreadMessageA
UnregisterClassW
IsWindow
SetForegroundWindow
GetWindow
DispatchMessageA
LoadBitmapA
DrawEdge
ScrollWindow
ShowOwnedPopups
GetClassNameA
GetKeyboardLayoutList
GetTopWindow
GetSystemMenu
ChildWindowFromPointEx
GetCaretPos
RedrawWindow
FrameRect
DestroyMenu
GetLastActivePopup
InvalidateRect
SetMenu
SetScrollRange
CallNextHookEx
DeferWindowPos
DefWindowProcW

mprmeui

_Eps
_Strcoll
_Stof
_Snan
_Strxfrm
_Dtest
_FSnan
_Getctype

comdlg32

FindTextA
ChooseColorA

wininet

HttpQueryInfoA
InternetReadFile
InternetCrackUrlA

oleaut32

SafeArrayGetLBound
VariantCopy
CreateErrorInfo
VariantClear
SetErrorInfo
SafeArrayUnaccessData

advapi32

RegDeleteValueA
RegDeleteKeyA
RegFlushKey

comctl32

ImageList_GetDragImage
ImageList_SetIconSize

imm32

ImmSetCompositionWindow

version

GetFileVersionInfoSizeA

shell32

ShellExecuteA

ole32

OleSetMenuDescriptor
OleSetClipboard

Exports

Exports

AdsTypeToLdapTypeCopyTime
GetDisplayName
CreateProcessNotify
DllClientCleanup
ConvertU2TrusteeToSid
GetPermLayers
AllocADsMem
AdsTypeToLdapTypeCopyGeneralizedTime
FindSearchTableIndex
lpqsmgr
DllClientStartup
GetLDAPTypeName
ConvertSidToU2Trustee
BuildADsParentPathFromObjectInfo
ConvertSidToString
GetDefaultServer
AllocADsStr
FreeObjectInfo
SdbCloseApphelpInformation
BuildADsPathFromLDAPPath
BerBvFree

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9e0fadadc63f8b508ba54626ac27ca0

Headers

File Characteristics

Imports

kernel32

gdi32

user32

mprmeui

comdlg32

wininet

oleaut32

advapi32

comctl32

imm32

version

shell32

ole32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 56KB

.rdata Size: 4KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 53KB - Virtual size: 56KB

.rdata
Size: 4KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 4KB