8e70b729f99a8991ac5cd15c91a14aaa3b33491ffa27cf7225895430cd6d47c0

Sharing

Copy URL Twitter E-mail

General

Target

8e70b729f99a8991ac5cd15c91a14aaa3b33491ffa27cf7225895430cd6d47c0
Size

63KB
MD5

fa9b2702f75885b89cdfc42db79ff8aa
SHA1

470c587190799f965499d7b7bf889744cad92481
SHA256

8e70b729f99a8991ac5cd15c91a14aaa3b33491ffa27cf7225895430cd6d47c0
SHA512

593685323411e2ddd35c2cc877c2225988a1b7ad530a42eee71e1f5eda5687cc0ed52c70e374536c558097d6b342d613a48abedea207b2703da3d57d6e76b90a
SSDEEP

1536:7uO3I8rhFQMIy9hBj8gKH4Qi2ixetOejy1:7hY8rhlVN2gMLW1

Score

N/A

Malware Config

Signatures

Files

8e70b729f99a8991ac5cd15c91a14aaa3b33491ffa27cf7225895430cd6d47c0
.dll windows x86

b1781398e01fd5b264865bce44eb7dcf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCapture
FindWindowExA
DrawIconEx
SetTimer
DestroyMenu
GetWindowTextA
SetMenuItemInfoW
GetWindowThreadProcessId
GetCaretPos
SetWindowRgn
BringWindowToTop
InvalidateRect
MapVirtualKeyA
DefWindowProcA
EnableWindow
EmptyClipboard
SetScrollPos
HideCaret
IsWindow
ShowWindow
ClientToScreen
GetMenuState
IsWindowEnabled
GetTopWindow
DrawFrameControl
OpenClipboard
SubtractRect
LoadStringW
RedrawWindow
SetKeyboardState
GetIconInfo
SetRect
BeginPaint
ChildWindowFromPointEx
GetClipboardFormatNameA
ValidateRect
GetMessageTime
GetWindowTextW
SetScrollInfo
IsWindowVisible

advapi32

RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
CloseHandle
ResumeThread
GlobalFree
CreateFileW
FlushFileBuffers
LoadLibraryExA
EnumCalendarInfoA
MapViewOfFileEx
SetErrorMode
GetExitCodeThread
ReadFile
GetModuleHandleA
GetModuleFileNameW
TerminateProcess
LoadResource
WaitForMultipleObjects
ReleaseMutex
FindClose
UnmapViewOfFile
WriteFile
GetComputerNameA
SetFilePointer
GetStdHandle
lstrcpynA
CreateFileMappingA
lstrlenW
VirtualQuery
SizeofResource
GlobalSize
SetFileAttributesA
GlobalGetAtomNameA

oleaut32

GetErrorInfo
SetErrorInfo
SafeArrayCreate
SafeArrayCreateVector
SafeArrayUnaccessData

ole32

CoUninitialize
DoDragDrop
CreateDataAdviseHolder
CoInitialize

gdi32

DeleteEnhMetaFile
CreateEnhMetaFileA
GetClipRgn
SaveDC
GetMapMode
GetTextExtentPointA
GetCurrentObject
GetFontLanguageInfo
GetDCOrgEx
LPtoDP
SetBkMode
StretchDIBits
OffsetRgn
SetTextCharacterExtra
DeleteObject
MoveToEx
SetRectRgn
SetPixel
Rectangle
GetTextMetricsA
GetWinMetaFileBits
PolyPolyline
CreateRectRgnIndirect
GetEnhMetaFileBits

comctl32

ImageList_SetIconSize
ImageList_DragEnter
ImageList_DragMove
ImageList_Create

mmutdfmt

_FDenorm
_LXbig
_Rteps
_Dtest
_Stod
_FExp
_Getcvt
_Inf
_FSinh

wininet

InternetConnectA
HttpSendRequestA

comdlg32

GetOpenFileNameA
ChooseColorA
ChooseFontA

imm32

ImmSetCompositionWindow

Exports

Exports

BerBvFree
FreeADsStr
GetPermLayers
ConvertSidToU2Trustee
BuildADsPathFromLDAPPath
CreateProcessNotify
DllClientCleanup
AllocADsStr
FreeObjectInfo
BuildADsPathFromParent
SdbCloseApphelpInformation
GetLDAPTypeName
cscrreg
DllClientStartup
ChangeSeparator
ConvertSidToString
Component
GetDisplayName
ApphelpUpdateCacheEntry
AdsTypeToLdapTypeCopyGeneralizedTime
FindSearchTableIndex
BuildADsParentPath

Sections

.text
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1781398e01fd5b264865bce44eb7dcf

Headers

File Characteristics

Imports

user32

advapi32

kernel32

oleaut32

ole32

gdi32

comctl32

mmutdfmt

wininet

comdlg32

imm32

Exports

Exports

Sections

.text Size: 50KB - Virtual size: 52KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 7KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 50KB - Virtual size: 52KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 7KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 4KB