371e968628445280ef5be6e4193bc25c

Sharing

Copy URL

Twitter E-mail

General

Target

371e968628445280ef5be6e4193bc25c
Size

28KB
MD5

371e968628445280ef5be6e4193bc25c
SHA1

4bad7d0e44bc1adf89faad24bf6ad3373d27db8c
SHA256

dcd5c43c1bad3ef436316326abcc256f37ab9194f4f2cbc188a444bd3f59e199
SHA512

6d7ccb5f8033e6fc34044cc25d0e19186cb1b748e5a59093f1e69ee2dc904e3e2b2fa0ecf14d14005ae37445f5c6db1c4bd0a1a84d858a2c52a40400fb15bb25
SSDEEP

384:RwQIz8PPfsR0zzNd1jNTAYuQvDr36MLWnktc+AfWm1A+ytUKvTWhWp:OzIvG0zzVjbuQLD6MSnIQ+m1A+fKK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
371e968628445280ef5be6e4193bc25c

Files

371e968628445280ef5be6e4193bc25c
.dll windows:4 windows x86 arch:x86

23d7d673119aa57cb708767b0ad93338

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

terralib

??0TeException@@QAE@ABV0@@Z

terraogcows

?readFromXML@TeOWSExceptionReport@TeOGC@@QAEXPAVTeXMLDecoder@2@@Z
?getExceptionItens@TeOWSExceptionReport@TeOGC@@QBEABV?$vector@PAVTeOWSExceptionReportItem@TeOGC@@V?$allocator@PAVTeOWSExceptionReportItem@TeOGC@@@std@@@std@@XZ
??0TeOWSException@TeOGC@@QAE@ABV01@@Z
??1TeOWSException@TeOGC@@UAE@XZ
??0TeOWSException@TeOGC@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?setFromText@TeOWSMimeType@TeOGC@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0TeOWSExceptionReport@TeOGC@@QAE@XZ
?getExceptionTextList@TeOWSExceptionReportItem@TeOGC@@QBEABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?getExceptionCode@TeOWSExceptionReportItem@TeOGC@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1TeOWSExceptionReport@TeOGC@@QAE@XZ

terraogcxml

??1TeXMLParserParams@TeOGC@@QAE@XZ
?TeProcessDocumentElement@TeOGC@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@3@@Z
??0TeXMLParserParams@TeOGC@@QAE@AB_N00ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?make@TeXMLDecoderFactory@TeOGC@@SAPAVTeXMLDecoder@2@ABVTeXMLParserParams@2@@Z
?getDoNamespaces@TeXMLParserParams@TeOGC@@QBEAB_NXZ

terraogccommon

?TeURLEncode@TeOGC@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?TeGetRequest@TeOGC@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0AAV23@@Z
?TeGetTopWebAddress@TeOGC@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
??0TeOGCException@TeOGC@@QAE@ABV01@@Z

libcurl

curl_global_cleanup
curl_easy_cleanup
curl_easy_getinfo
curl_easy_perform
curl_easy_setopt
curl_easy_init
curl_slist_free_all
curl_slist_append
curl_global_init

msvcp71

?_Nomemory@std@@YAXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ

msvcr71

__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
_CxxThrowException
??3@YAXPAX@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
??_V@YAXPAX@Z
malloc
__CppXcptFilter
_adjust_fdiv
_initterm
free
_onexit
__dllonexit
__security_error_handler
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_callnewh

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess

Exports

Exports

??0TeOWSClient@TeOGC@@QAE@ABV01@@Z
??0TeOWSClient@TeOGC@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1TeOWSClient@TeOGC@@UAE@XZ
??4TeOWSClient@TeOGC@@QAEAAV01@ABV01@@Z
??_7TeOWSClient@TeOGC@@6B@
??_FTeOWSClient@TeOGC@@QAEXXZ
?checkException@TeOWSClient@TeOGC@@UBEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?checkException@TeOWSClient@TeOGC@@UBEXPAVTeXMLDecoder@2@@Z
?executeGETRequest@TeOWSClient@TeOGC@@QBEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVTeOWSMimeType@2@AAV34@@Z
?executePOSTRequest@TeOWSClient@TeOGC@@QBEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVTeOWSMimeType@2@AAV34@@Z
?executePOSTRequest@TeOWSClient@TeOGC@@QBEXPADABHABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AAVTeOWSMimeType@2@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?finalizePlatform@TeOWSClient@TeOGC@@SAXXZ
?initializePlatform@TeOWSClient@TeOGC@@SAXXZ
?setServiceURL@TeOWSClient@TeOGC@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23d7d673119aa57cb708767b0ad93338

Headers

File Characteristics

Imports

terralib

terraogcows

terraogcxml

terraogccommon

libcurl

msvcp71

msvcr71

kernel32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 372B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 372B

.reloc
Size: 3KB - Virtual size: 2KB