cf22db76df4d27e3271c813ab894e321b392d7ebd83df924ccbe24c21d48fa65

Sharing

Copy URL Twitter E-mail

General

Target

cf22db76df4d27e3271c813ab894e321b392d7ebd83df924ccbe24c21d48fa65
Size

128KB
MD5

8631a2f2a9496b1ac4c1078064253446
SHA1

992b90610fa80e23312cdbd024f0d9dd15172ec8
SHA256

cf22db76df4d27e3271c813ab894e321b392d7ebd83df924ccbe24c21d48fa65
SHA512

7d750b0c264ccea19aeba74df8096aaaa61734ba5dbda4fd504e740f5938d9f19463adfc3829c7c37dd4ecd46c4790c8d19f9fed712e66c934c41d8cc3595c44
SSDEEP

1536:lKTeLCo2q0/7C5OZkFymm0H/TakOSYtSsA3N3SkK0varuFSOsQM3jur+wrtW9Cwl:l7r5WU1fTakOSYGYrr2b3MGtSCwHF

Score

N/A

Malware Config

Signatures

Files

cf22db76df4d27e3271c813ab894e321b392d7ebd83df924ccbe24c21d48fa65
.dll windows x86

c9a1d4ac915e91501385cde18d96827c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc80u

ord2708
ord4301
ord2829
ord2725
ord2531
ord3824
ord5562
ord5209
ord5226
ord4562
ord3942
ord2239
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord5096
ord1007
ord3800
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord4032
ord757
ord629
ord1430
ord6284
ord383
ord2895
ord1176
ord5398
ord2460
ord293
ord6700
ord266
ord2832
ord2260
ord3927
ord2340
ord1571
ord2121
ord762
ord1118
ord1002
ord5434
ord290
ord777
ord3249
ord1172
ord5316
ord6282
ord5327
ord6293
ord261
ord5558
ord3990
ord5484
ord5414
ord2444
ord2534
ord2640
ord6751
ord765
ord315
ord1079
ord1033
ord1087
ord1197
ord1199
ord1093
ord371
ord1908
ord1162
ord1115
ord1192
ord1168
ord1170
ord314
ord1200
ord581
ord2527
ord3712
ord3713
ord3703
ord2638
ord3943
ord4475
ord4255
ord3327
ord566
ord3677
ord776
ord774
ord283
ord280
ord1472
ord870
ord577
ord764

msvcr80

__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
__CxxFrameHandler3
_CxxThrowException
memcpy_s
_wtoi
_unlock
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
free
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_encode_pointer

kernel32

TerminateProcess
Sleep
InterlockedExchange
LocalAlloc
LocalFree
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedCompareExchange

ole32

OleRun
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance

oleaut32

VariantClear
VariantCopy
VariantInit
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
GetErrorInfo

msvcp80

??_D?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_WH_W@Z
?close@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z

Exports

Exports

DIR_createDevice
DIR_createDevice2
DIR_createDeviceWithStatus
DIR_createDeviceWithStatus2
DIR_createService
DIR_createService2
DIR_createSettings
DIR_createSettings2
DIR_createSettingsWithSubmenu2
DIR_createStatus2
DIR_createSubmenu2
DIR_createVersionAndDevices
DIR_createVersionAndDevices2
DIR_getVersion
DIR_getXMLCode
DIR_removeDevice
DIR_removeService
PM_AddFiles
PM_AddParameter
PM_GetFileList
SB_getFilegivenSeq
SB_getFilegivenType
SB_getListOfFilesAndXMLCode
SB_getSortedCsbList
SB_listFilesOfType
SB_sortListByFileTypeAndSequenceNum
SB_sortListBySequenceNum
SB_sortListOfFileType
SJP_AddNewProfile
SJP_AddNewProfile2NewXMLFile
SJP_ConvertsSJPtoXML
SJP_GetAllDestinations
SJP_GetAllDestinationsFromFile
SJP_GetAllValues
SJP_GetValue
SJP_GetValueFromFile
SJP_LoadXMLFile
SJP_ModifyXMLFile
SJP_NextDestination

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9a1d4ac915e91501385cde18d96827c

Headers

File Characteristics

Imports

mfc80u

msvcr80

kernel32

ole32

oleaut32

msvcp80

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 60KB - Virtual size: 58KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 60KB - Virtual size: 58KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB