2b688956bc4ef97c4731eab05b1eeba2003c8026c490572c0a4deb0c3e31caef

Sharing

Copy URL Twitter E-mail

General

Target

2b688956bc4ef97c4731eab05b1eeba2003c8026c490572c0a4deb0c3e31caef
Size

72KB
MD5

409413d31e07404b57201d66ee47ece0
SHA1

15754345684f625c6131d5c1748b7b51b4844d22
SHA256

2b688956bc4ef97c4731eab05b1eeba2003c8026c490572c0a4deb0c3e31caef
SHA512

2e7efe2aba89eeae738a284442b3774406b6aed72a03e5c5ac3071b30a04444bd89d450be0ec8d3141cbfd45e8139ad271b6e336ba20bf784728fdf690879560
SSDEEP

1536:ULI/LG6OPMAv4v6EivQeL/AjI0tiggKbpoYifdxvZy:LG6OPM04n8Q2HbZKtMxv

Score

N/A

Malware Config

Signatures

Files

2b688956bc4ef97c4731eab05b1eeba2003c8026c490572c0a4deb0c3e31caef
.dll windows x86

636e7f5a3a130b7254e29160f0e0b5b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
IsDebuggerPresent

user32

GetSystemMetrics
CharNextA

msvcr100

memset
_stricmp
_unlock
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
realloc
free
malloc
printf
sprintf
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
__dllonexit
strrchr
_putenv

Exports

Exports

CleanupResourceLoader

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

636e7f5a3a130b7254e29160f0e0b5b0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcr100

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.rmnet
Size: 56KB - Virtual size: 60KB