9abcfaa68d3ba04c8e6e72edc575da0332f6e3d2c2190f1f9fe5a41fb88ced88

Sharing

Copy URL Twitter E-mail

General

Target

9abcfaa68d3ba04c8e6e72edc575da0332f6e3d2c2190f1f9fe5a41fb88ced88
Size

168KB
MD5

65afabd503852d02906f5f74184527e0
SHA1

4b7cc54289b1693f8c4a102ed3e65b1067d8cb15
SHA256

9abcfaa68d3ba04c8e6e72edc575da0332f6e3d2c2190f1f9fe5a41fb88ced88
SHA512

338430aa14d8720b60905da9457e734d6123bf0ac8b805c5d0099f1682525a62b6ab837873263c91c5f667cb545601b085bbecb0b2692e3bb6cba09606a966a9
SSDEEP

3072:68WWkvG/+hatDeBS/aZbo+DzVDcRbYIU+/3rqo7w9H1kGAoH:Y5j70+/dcMe3rqVH1kGbH

Score

N/A

Malware Config

Signatures

Files

9abcfaa68d3ba04c8e6e72edc575da0332f6e3d2c2190f1f9fe5a41fb88ced88
.dll windows x86

341c687b15f95a4eabc71259b0cebfa3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

npptools

CreateNPPInterface
GetNPPBlobTable
SetBoolInBlob
CreateBlob
DestroyBlob

kernel32

InterlockedDecrement
LCMapStringW
LCMapStringA
GlobalAlloc
GlobalFree
GetSystemTimeAsFileTime
GetVersionExA
LeaveCriticalSection
EnterCriticalSection
ResetEvent
SetEvent
LoadLibraryA
DeleteCriticalSection
CloseHandle
CreateEventA
InitializeCriticalSection
Sleep
OutputDebugStringA
WaitForSingleObject
GetStringTypeW
GetStringTypeA
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteFile
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA

ole32

CoInitializeEx
CoInitialize
CoUninitialize

Exports

Exports

WanPacketCloseAdapter
WanPacketGetReadEvent
WanPacketGetStats
WanPacketOpenAdapter
WanPacketReceivePacket
WanPacketSetBpfFilter
WanPacketSetBufferSize
WanPacketSetMinToCopy
WanPacketSetMode
WanPacketSetReadTimeout
WanPacketTestAdapter

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

341c687b15f95a4eabc71259b0cebfa3

Headers

File Characteristics

Imports

npptools

kernel32

ole32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text Size: 104KB - Virtual size: 104KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 104KB - Virtual size: 104KB