d0fbd0d36dfd41f5c5a8b1dd80c7ff8502fef5c283ab029508d7f986e8dadf73

Sharing

Copy URL

Twitter E-mail

General

Target

d0fbd0d36dfd41f5c5a8b1dd80c7ff8502fef5c283ab029508d7f986e8dadf73
Size

60KB
MD5

96efae60ccc7cb692933d60ebacf6c06
SHA1

c7d43ffab6ce5bf7b2a29fe99292abb8cecd3c75
SHA256

d0fbd0d36dfd41f5c5a8b1dd80c7ff8502fef5c283ab029508d7f986e8dadf73
SHA512

ad3086f8110f3ab83351487ace58687daf9ae4718c5ec5d50a57ab634d9d511a61e99012c1288122823c0a604aabbcf4ff4743d8bdeffe69e0d960f45362a9c3
SSDEEP

768:Lhh/EfkaS+jrn61L+PAlWI9RKYPlLEze5oLs+V/+v0mcOEXCS:L2bSgc+/0dLEzdb+smXe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0fbd0d36dfd41f5c5a8b1dd80c7ff8502fef5c283ab029508d7f986e8dadf73

Files

d0fbd0d36dfd41f5c5a8b1dd80c7ff8502fef5c283ab029508d7f986e8dadf73
.dll windows:4 windows x86 arch:x86

aa7b72f11a374ee61c3190b258ce0ffb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\buildbot\win32-comm-central-nightly\build\objdir-tb\mailnews\mapi\mapiDLL\mozMapi32.pdb

Imports

kernel32

TlsFree
TlsAlloc
TlsSetValue
TlsGetValue
MultiByteToWideChar
LCMapStringW
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RaiseException
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Exports

Exports

GetMapiDllVersion
MAPIAddress
MAPIDeleteMail
MAPIDetails
MAPIFindNext
MAPIFreeBuffer
MAPILogoff
MAPILogon
MAPIReadMail
MAPIResolveName
MAPISaveMail
MAPISendDocuments
MAPISendMail

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa7b72f11a374ee61c3190b258ce0ffb

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ole32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB