b16fe330618ec390653ffbd3ba95c266

Sharing

Copy URL

Twitter E-mail

General

Target

b16fe330618ec390653ffbd3ba95c266
Size

247KB
MD5

b16fe330618ec390653ffbd3ba95c266
SHA1

e7f6d545c041db3bbb480286c68db68a0a0d3c15
SHA256

5a0c9be5bb76504b967a82c7afcaa2389904a68b2438c98ca44d0c697e5bc1d4
SHA512

1b107e03d59d92d4a128f310a77bdc7d85fd421a9e334a8048c9584f6034a52c7fea9c1c4531dce403da5f706dcf3a83123abd1dc5031597a474c0750cef5f7e
SSDEEP

6144:ZjsBayD8JGXwWz7wVAzRkF0JfVohHSc74qTJ98VjJdpUhJLckNaZTMmyca:ZjsBayD8JGXwWz7wVAzRkF00374WyVtG

Score

N/A

Malware Config

Signatures

Files

b16fe330618ec390653ffbd3ba95c266
.dll windows x86

3d9411f3897f38021ee8faf3ae2dac9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
FormatMessageW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
CreateFileA
LeaveCriticalSection
SetFilePointer
GetModuleFileNameA
DeleteFileA
GetFileSize
CloseHandle
WriteFile
FormatMessageA
GetModuleHandleW
GetModuleFileNameW
GetCurrentProcessId
GetACP
TerminateProcess
GetCurrentProcess
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetLocalTime
GetProcAddress
LoadLibraryW
GetTickCount
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
HeapAlloc
HeapFree
GetCPInfo
GetOEMCP
IsValidCodePage
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapReAlloc
VirtualAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

shlwapi

PathRemoveFileSpecW
PathRemoveFileSpecA

Exports

Exports

DGCheckPeripheralDevice
DGClose
DGFreeDrvInfo
DGFreeSoftwareInfo
DGGetAllowSwitch
DGGetDtlAdType
DGGetLocalBrandName
DGGetLocalBrandSoftware
DGGetLocalDrvDesc
DGGetLocalPciDrvInfo
DGGetLocalPciSpecialDrvInfo
DGGetLocalPciSpecialStableDrvInfo
DGGetLocalPciStableDrvInfo
DGGetLocalUsbDrvInfo
DGGetMobileProductInfo
DGGetOtherBrandName
DGGetOtherBrandSoftware
DGGetOtherDrvDesc
DGGetOtherPciDrvInfo
DGGetOtherPciSpecialDrvInfo
DGGetReportType
DGGetServerClass
DGGetSystemUsbDrvInfo
DGInit
DGIsDriverOSSupply
DGIsInitRetry
DGIsStartCalendar
DGReportDrvInstResult
DGReportPnpDriverInstallResult
DGSetClientVer
DGSetDisplayType
DGSetLocalBrandStr
DGSetLocalSystemInfo
DGSetMajorAppID
DGSetOtherBrandStr
DGSetOtherSystemInfo
DGSetUnionID
DGStatReport

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3d9411f3897f38021ee8faf3ae2dac9a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

Exports

Exports

Sections

.text Size: 130KB - Virtual size: 130KB

.rdata Size: 42KB - Virtual size: 42KB

.data Size: 5KB - Virtual size: 20KB

.rsrc Size: 1024B - Virtual size: 852B

.reloc Size: 10KB - Virtual size: 9KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 130KB - Virtual size: 130KB

.rdata
Size: 42KB - Virtual size: 42KB

.data
Size: 5KB - Virtual size: 20KB

.rsrc
Size: 1024B - Virtual size: 852B

.reloc
Size: 10KB - Virtual size: 9KB

.rmnet
Size: 56KB - Virtual size: 60KB