user[.]dat | Triage

Resubmissions

22/12/2022, 21:04

221222-zwjtaaad5x 10

22/12/2022, 20:52

221222-zn6m3sfb82 3

22/12/2022, 20:49

221222-zmh6dsfb77 1

Sharing

Copy URL Twitter E-mail

General

Target

user.dat
Size

516KB
MD5

36aca2c5fd5b122bf3c3682b0ebb1cee
SHA1

fbd6c7227e048d3ef6f44305dc21f57852422460
SHA256

c2b65a242cd1d6bf8e382130852b19f5da71a20277bce3ce37f95fd96a04ccd9
SHA512

46c9391816052f8e68d682e853f89f2b8655328bee9e68845dbd27204b9630a236f09761d0bcc43019d7bd5cf014b0ecc5ac0e100512be3c04a7fbc6aa158f68
SSDEEP

12288:+ihnctArBgRprvbiIIAuz19n26pmpmlCO:HnqAyprvbiIIAuRUmxf

Score

N/A

Malware Config

Signatures

Files

user.dat
.dll windows x86

d0ce5a8d5d0f4fa36cbdd8035bad1ebc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DebugBreak
GetCommandLineA
GetVersion
RtlUnwind
HeapFree
GetLastError
CloseHandle
WriteFile
ReadFile
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
GlobalMemoryStatus
GetTickCount
FindFirstFileA
OpenFile
lstrcpynA
GetDriveTypeA
IsDBCSLeadByte
lstrlenA
GetFileAttributesA
_lclose
_llseek
_lread
_lwrite
DeleteFileA
FreeLibrary
GetDiskFreeSpaceA
GetTempFileNameA
GetTempPathA
lstrcatA
lstrcpyA
FindClose
CompareStringA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
CreateDirectoryA
RemoveDirectoryA
SetEnvironmentVariableA
CompareStringW
IsDBCSLeadByteEx
MoveFileA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapCompact
RaiseException
GetCurrentProcessId
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr

user32

MessageBoxA
CharUpperBuffA
CharToOemBuffA
OemToCharBuffA
GetActiveWindow

mpr

WNetEnumResourceA
WNetCloseEnum
WNetGetConnectionA
WNetOpenEnumA
WNetAddConnection2A

Exports

Exports

TDFAddDocJavaScript
TDFAddTemplate
TDFClose
TDFCreate
TDFEmbedAndClose
TDFEnumValues
TDFExtractAppendSaves
TDFExtractAttachment
TDFGetAP
TDFGetEncoding
TDFGetFDFVersion
TDFGetFile
TDFGetFlags
TDFGetID
TDFGetNthValue
TDFGetOpt
TDFGetStatus
TDFGetValue
TDFGetVersion
TDFNextFieldName
TDFOpen
TDFOpenFromEmbedded
TDFRemoveItem
TDFSave
TDFSetAP
TDFSetAPRef
TDFSetAS
TDFSetEncoding
TDFSetFDFVersion
TDFSetFile
TDFSetFileEx
TDFSetFlags
TDFSetGoToAction
TDFSetGoToRAction
TDFSetHideAction
TDFSetID
TDFSetIF
TDFSetImportDataAction
TDFSetJavaScriptAction
TDFSetNamedAction
TDFSetOnImportJavaScript
TDFSetOpt
TDFSetResetByNameAction
TDFSetResetFormAction
TDFSetStateAction
TDFSetStatus
TDFSetSubmitByNameAction
TDFSetSubmitFormAction
TDFSetTargetFrame
TDFSetURIAction
TDFSetValue
Updt

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

d0ce5a8d5d0f4fa36cbdd8035bad1ebc

Headers

File Characteristics

Imports

kernel32

user32

mpr

Exports

Exports

Sections

.text Size: 324KB - Virtual size: 323KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 36KB - Virtual size: 47KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 124KB - Virtual size: 123KB

.text
Size: 324KB - Virtual size: 323KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 36KB - Virtual size: 47KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 124KB - Virtual size: 123KB