6e7d4fc845d401b6522982c524c83c92b2e5fd45488846588eede6a737839bb9

Sharing

Copy URL Twitter E-mail

General

Target

6e7d4fc845d401b6522982c524c83c92b2e5fd45488846588eede6a737839bb9
Size

108KB
MD5

46709f3a36d93cbda9272f377b77de00
SHA1

eea7715dcc9bed0f1931886267dd32856aa5430e
SHA256

6e7d4fc845d401b6522982c524c83c92b2e5fd45488846588eede6a737839bb9
SHA512

cb2f99fbc92044433464bff3d47b62c43f33058f72069a11206fe3f0e823dc69f9623ff472e8bb514e087eda5c07c043c809614d464ab170aebd95db53384f34
SSDEEP

1536:jTIE5ur2cuqokFKepcZD5X40q2/gzxMrGEh3XWeN0UtegPb7AoOVvW1a:jWAh6cZD5X40qLuGf/UZX4F

Score

N/A

Malware Config

Signatures

Files

6e7d4fc845d401b6522982c524c83c92b2e5fd45488846588eede6a737839bb9
.dll windows x86

4d5dc737a5b6180b6ef47cf340e870e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Thread32Next
Thread32First
CloseHandle
Process32Next
GetWindowsDirectoryA
CreateToolhelp32Snapshot
Process32First
GetVolumeInformationA
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
HeapSize

user32

GetWindowTextA
EnumThreadWindows

iphlpapi

GetAdaptersInfo

Exports

Exports

MIDLib_GetGameRoomCode
MIDLib_GetMachineId

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4d5dc737a5b6180b6ef47cf340e870e3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

iphlpapi

Exports

Exports

Sections

.text Size: 33KB - Virtual size: 32KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 4KB - Virtual size: 3KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 33KB - Virtual size: 32KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 4KB - Virtual size: 3KB

.rmnet
Size: 56KB - Virtual size: 60KB