e7f3703149fd1142bac022c619b51ee170848b56fe3f1d87be71e1622852021f

General

Target

e7f3703149fd1142bac022c619b51ee170848b56fe3f1d87be71e1622852021f
Size

116KB
MD5

64851606b1eaeac923cee42296813fc0
SHA1

2126eab901a22fc5ecb35ba87364accd50595e09
SHA256

e7f3703149fd1142bac022c619b51ee170848b56fe3f1d87be71e1622852021f
SHA512

c71db1a714396c7526bb52a806e2ca81f72bf6b7a3309121a8824dc1746b0dca7eca18a35bbeed28a4c86718084cef8980228b44fb539cc710893078ebd19eb8
SSDEEP

3072:QeTgXCtr7FqgmGs6eVfMc2xVBWZZcAn6:QeTftmG8McJj

Score

N/A

Malware Config

Signatures

Files

e7f3703149fd1142bac022c619b51ee170848b56fe3f1d87be71e1622852021f
.dll windows x86

f879079ea9b43be9b48bb86e2476bcb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pncrt

_vsnprintf
_ismbcspace
memmove
atol
strncpy
strtok
_strnicmp
strchr
realloc
isdigit
_findfirst
_findnext
_findclose
??3@YAXPAX@Z
_initterm
_adjust_fdiv
__dllonexit
_onexit
free
malloc
sprintf
rename
_splitpath
strrchr
_purecall
fread
??2@YAPAXI@Z
fclose
strstr
ftell
_fsopen
fseek
strncmp
_stricmp
_strlwr
_strcmpi
_unlink
_fstat
_mkdir
_stat
_fileno

kernel32

DisableThreadLibraryCalls
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetProcAddress
FreeLibrary
LoadLibraryA
lstrcpyA

user32

CharNextA
CharUpperA
GetSystemMetrics

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

winmm

timeKillEvent
timeSetEvent

Exports

Exports

CanUnload
RMACreateInstance
RMAShutdown
TFileSys_GetLastError

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f879079ea9b43be9b48bb86e2476bcb9

Headers

File Characteristics

Imports

pncrt

kernel32

user32

advapi32

winmm

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 4KB - Virtual size: 1KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 4KB - Virtual size: 1KB

.rmnet
Size: 60KB - Virtual size: 60KB