ed1f7b22887b394346e4a5b77fe497fefb37afc1dedc3ac1038474db3fd0058d

Sharing

Copy URL Twitter E-mail

General

Target

ed1f7b22887b394346e4a5b77fe497fefb37afc1dedc3ac1038474db3fd0058d
Size

28KB
MD5

e9e0267914e8b7927356a2d09d917982
SHA1

eee83431e3f1114653e70a33c1cdf5a9c9d94d59
SHA256

ed1f7b22887b394346e4a5b77fe497fefb37afc1dedc3ac1038474db3fd0058d
SHA512

2c32032d50876d68e31ee5fc05ade291e6c35a0582fb598907c1c39e3f9ecfe76cbc8d8ca1cc7e1bf608c98ae383b8f292a56cf4de81231dc846a1d280298593
SSDEEP

768:HIlK2AR0nDMY6Ja0u2+7fh2R+rFZnCIopkY:HIlKm5v2+7fh2R+rFZnCIopkY

Score

N/A

Malware Config

Signatures

Files

ed1f7b22887b394346e4a5b77fe497fefb37afc1dedc3ac1038474db3fd0058d
.dll windows x86

02f17d24125011009be14a9a8a6ee9b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecW

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
WriteFile
CreateFileW
FlushFileBuffers
GetModuleFileNameW
FindClose
FindNextFileW
FindFirstFileW
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
lstrcmpiW
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess

shell32

SHGetSpecialFolderPathW

msvcp71

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@V312@0@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@Viterator@12@0ABV12@@Z
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Nomemory@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@XZ

msvcr71

__CxxFrameHandler
??3@YAXPAX@Z
wcslen
??0exception@@QAE@ABV0@@Z
_CxxThrowException
memmove
_wmkdir
remove
_wmakepath
_wsplitpath
??_V@YAXPAX@Z
malloc
_callnewh
??1type_info@@UAE@XZ
__security_error_handler
_except_handler3
?terminate@@YAXXZ
free
_initterm
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
??1exception@@UAE@XZ
??0exception@@QAE@XZ

log4cplusu

?setName@Appender@log4cplus@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getName@Appender@log4cplus@@UAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??1Appender@log4cplus@@UAE@XZ
??0Appender@log4cplus@@QAE@XZ
?setErrorHandler@Appender@log4cplus@@UAEXV?$auto_ptr@VErrorHandler@log4cplus@@@std@@@Z
?debug@LogLog@helpers@log4cplus@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?destructorImpl@Appender@log4cplus@@QAEXXZ
?gettimeofday@Time@helpers@log4cplus@@SA?AV123@XZ
?getFormattedTime@Time@helpers@log4cplus@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV45@_N@Z
?getErrorHandler@Appender@log4cplus@@UAEPAVErrorHandler@2@XZ
?setLayout@Appender@log4cplus@@UAEXV?$auto_ptr@VLayout@log4cplus@@@std@@@Z
?getLogLog@LogLogUser@helpers@log4cplus@@QBEAAVLogLog@23@XZ
?getLayout@Appender@log4cplus@@UAEPAVLayout@2@XZ

Exports

Exports

??0CountFileAppender@logger@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H_N@Z
??1CountFileAppender@logger@@UAE@XZ
??4?$binary_function@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@_N@std@@QAEAAU01@ABU01@@Z
??4noCaseCompareW@@QAEAAU0@ABU0@@Z
??RnoCaseCompareW@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
??_7CountFileAppender@logger@@6BLogLogUser@helpers@log4cplus@@@
??_7CountFileAppender@logger@@6BSharedObject@helpers@log4cplus@@@
?append@CountFileAppender@logger@@MAEXABVInternalLoggingEvent@spi@log4cplus@@@Z
?close@CountFileAppender@logger@@UAEXXZ
?create_app_folder@logger@@YAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?create_in_app_folder@logger@@YAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?flush@CountFileAppender@logger@@UAEXXZ
?get_app_data_forder@logger@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?get_app_folder@logger@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?get_filename@CountFileAppender@logger@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?get_log_filename@logger@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@0@Z
?get_time_string@logger@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
?init@CountFileAppender@logger@@AAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?rollover@CountFileAppender@logger@@IAEXXZ
?toNarrowString@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PB_WH@Z
?toWideString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH@Z

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02f17d24125011009be14a9a8a6ee9b3

Headers

File Characteristics

Imports

shlwapi

kernel32

shell32

msvcp71

msvcr71

log4cplusu

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 432B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 432B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB