b8074c8c84f1441fc4d9547e8e8ee478a303e79b92f5904461f34b221fd3b3c7

General

Target

b8074c8c84f1441fc4d9547e8e8ee478a303e79b92f5904461f34b221fd3b3c7
Size

12KB
MD5

71fe4394d1c546460fdb1952e672121b
SHA1

b644d844106f3150fdba9ed8847ab91277c83cb2
SHA256

b8074c8c84f1441fc4d9547e8e8ee478a303e79b92f5904461f34b221fd3b3c7
SHA512

b54c0f1202ad5cff6b6f17fb04f035d9ea40f61ccc9bac3a2c3b8e8bf889c56ba22344270864aa63111a91bac51a6f319fc21b0e96bf59c59bc9fa8105218bf4
SSDEEP

192:Kon1zrRD8GQ0GhMp94z5LZP3Lc5vn+wDrs915bUWS3CgYWddzXaHb:K01RD8GPGhwAXU+MrsDaWgCgYWdd6

Score

N/A

Malware Config

Signatures

Files

b8074c8c84f1441fc4d9547e8e8ee478a303e79b92f5904461f34b221fd3b3c7
.dll windows x86

d00268c2c05640217fa0e61f8d26f1a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
_strlwr
_XcptFilter
_except_handler4_common
memset
_adjust_fdiv
_amsg_exit
_initterm
free
malloc

ntdll

NtCreateFile
RtlInitUnicodeString
NtDeviceIoControlFile

kernel32

LoadLibraryW
WideCharToMultiByte
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
DisableThreadLibraryCalls
WaitForSingleObject
CloseHandle
CreateEventW
LocalFree
LocalAlloc
GetProcAddress
FreeLibrary
GetLastError
Sleep

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

ws2_32

inet_addr

Exports

Exports

AcsHlpNbConnection
WSAttemptAutodialAddr
WSAttemptAutodialName
WSNoteSuccessfulHostentLookup

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.texc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d00268c2c05640217fa0e61f8d26f1a6

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

kernel32

advapi32

ws2_32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.texc Size: 2KB - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB

.texc
Size: 2KB - Virtual size: 4KB