0f0dfef1ddf9ffeb84516edaa640e7244a5a9171de5855c7cae88ad328bc1c22

General

Target

0f0dfef1ddf9ffeb84516edaa640e7244a5a9171de5855c7cae88ad328bc1c22
Size

51KB
MD5

79ecc5b903fd491e3cfbcdcf54faa73c
SHA1

352aca14fafefd51e0dabe6d6a613023e4d35439
SHA256

0f0dfef1ddf9ffeb84516edaa640e7244a5a9171de5855c7cae88ad328bc1c22
SHA512

695ca800f2d3ce58fd1ade107c17634aee8f09c9d2114169b5386dec657ac223aedea73e66348db18ae89674c2cb7e3bccb79d334326771314e9fd1e99de5e80
SSDEEP

1536:2MAhBbfhZ1GDBcK+NkWrmgMKRwOzCji4f:vAhBbT1GFcKWkd+RDzX4f

Score

N/A

Malware Config

Signatures

Files

0f0dfef1ddf9ffeb84516edaa640e7244a5a9171de5855c7cae88ad328bc1c22
.dll windows x86

b8b6e2f9c2b69df9bda1f1af6dd9a188

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteProcessMemory
InterlockedDecrement
GlobalDeleteAtom
CreateThread
GlobalUnlock
GetCurrentDirectoryA
VerLanguageNameA
FindFirstFileA
WriteFile
VirtualAlloc
GetProcessHeap
GetCurrentProcessId
HeapLock
LoadLibraryA
GetStdHandle
VirtualFree
CreateEventA
PulseEvent
FlushInstructionCache
FileTimeToSystemTime
CloseHandle

ntdll

NtSetTimer
NtCreateTimer
ZwCreateEvent
ZwClose

Exports

Exports

InternalGetTcpTable
SetIpTTL
GetIpAddrTable
SetIpForwardEntry
Icmp6CreateFile
CreateProcessNotify
DllClientCleanup
cscrutou
IpRenewAddress
DllClientStartup
NotifyAddrChange
GetOwnerModuleFromUdpEntry
GetOwnerModuleFromTcp6Entry
IcmpParseReplies
GetNetworkParams
GetIcmpStatistics
NhGetInterfaceNameFromGuid
GetAdaptersAddresses
GetNumberOfInterfaces
GetInterfaceInfo
InternalSetIpStats
register_icmp
InternalGetUdpTable
UnenableRouter
GetAdapterIndex
NTPTimeToNTFileTime
SetIpNetEntry
InternalGetIpForwardTable
GetIfTable
GetIpNetTable
InternalSetIpNetEntry

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8b6e2f9c2b69df9bda1f1af6dd9a188

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 37KB

.data Size: 11KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 37KB - Virtual size: 37KB

.data
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB