2a842a110fc718bd0f7a15e771363439

Sharing

Copy URL

Twitter E-mail

General

Target

2a842a110fc718bd0f7a15e771363439
Size

82KB
MD5

2a842a110fc718bd0f7a15e771363439
SHA1

c03016a4c299371b37fe0492b2c929ce861934e3
SHA256

5af9351fc9f16494e55b39151c8834a15d5497818605e981dedb50961d5e24c6
SHA512

adbc808ca4b9046a2319a967fb363cf47c9f5a3d139c4d3a4b44dc33c8fb7437f8405203c12dc60ccd3d5b957bd166a298d1c6f51ab06931ff54f61ab47e8694
SSDEEP

1536:3REOF7A9MVPwMJFOLamVTgB0n4PXko/bNF0KwBWKiUCu1:BEy7CMVP5FCamHn4v7/H0K4ydu1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a842a110fc718bd0f7a15e771363439

Files

2a842a110fc718bd0f7a15e771363439
.dll windows:4 windows x86 arch:x86

528ee0bc38676dd657cd92a2389e954a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr71

_adjust_fdiv
__CppXcptFilter
_initterm
__dllonexit
_onexit
_except_handler3
malloc
free
??1type_info@@UAE@XZ
__CxxFrameHandler
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??3@YAXPAX@Z
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
?terminate@@YAXXZ

kernel32

DisableThreadLibraryCalls

sfx680mi

ord1770
ord1188
ord1769
ord1791
ord2791
ord1709
ord1218

tl680mi

ord735
ord729

cppu3

uno_type_sequence_realloc
uno_type_assignData
typelib_static_type_getByTypeClass
uno_any_construct
uno_type_any_construct
uno_any_destruct
uno_type_any_assign
typelib_static_type_init
typelib_static_sequence_type_init
uno_type_sequence_construct
uno_type_destructData
uno_type_sequence_reference2One
cppu_unsatisfied_iquery_msg

cppuhelper3msc

?ImplHelper_getImplementationId@cppu@@YA?AV?$Sequence@C@uno@star@sun@com@@PAUclass_data@1@@Z
?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
??1OWeakObject@cppu@@MAE@XZ
?WeakImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?acquire@OWeakObject@cppu@@UAAXXZ
?release@OWeakObject@cppu@@UAAXXZ
??0OWeakObject@cppu@@QAE@XZ
?createSingleFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
?WeakImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakObject@1@@Z

sal3

osl_incrementInterlockedCount
rtl_uString2String
rtl_string_release
rtl_uString_acquire
rtl_string2UString
rtl_uString_release
rtl_uString_assign
rtl_uString_newConcat
rtl_ustr_compare_WithLength
rtl_ustr_reverseCompare_WithLength
rtl_ustr_ascii_compare_WithLength
rtl_ustr_indexOfStr_WithLength
rtl_uString_newFromAscii
osl_acquireMutex
osl_releaseMutex
osl_getGlobalMutex
rtl_allocateMemory
rtl_freeMemory

Exports

Exports

GetVersionInfo
component_getDescriptionFunc
component_getFactory
component_getImplementationEnvironment
component_writeInfo

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

528ee0bc38676dd657cd92a2389e954a

Headers

File Characteristics

Imports

msvcr71

kernel32

sfx680mi

tl680mi

cppu3

cppuhelper3msc

sal3

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 57KB - Virtual size: 57KB

.rsrc Size: 1024B - Virtual size: 944B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 57KB - Virtual size: 57KB

.rsrc
Size: 1024B - Virtual size: 944B

.reloc
Size: 1KB - Virtual size: 1KB