a82918109a644df889888ece2f2bd0cc83b9fc379a964e0a997578db0fc1d778

General

Target

a82918109a644df889888ece2f2bd0cc83b9fc379a964e0a997578db0fc1d778
Size

120KB
MD5

4a0a7baa0c0668821449e89533015a2c
SHA1

a9624eb1826ea6186e3c30d3b39a0ab08bacc6dc
SHA256

a82918109a644df889888ece2f2bd0cc83b9fc379a964e0a997578db0fc1d778
SHA512

34bfb740ec6a958b45013099c78aab7571b3cfd2251fb3cf277887a214f057429c722f98d127e7aabe80b772b4c9c4b411268d0f912232cda056d3573ec335c0
SSDEEP

3072:fHl32Zyw9c3RJP1RM9AvImtq4lLELHkBM1vUHQbB2:fHl3WO7U9QVlcJ/2

Score

N/A

Malware Config

Signatures

Files

a82918109a644df889888ece2f2bd0cc83b9fc379a964e0a997578db0fc1d778
.dll windows x86

9a0a13edd732e583506aec6bace5f5c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
DisableThreadLibraryCalls
EnumResourceLanguagesW
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetVersion
HeapAlloc
LoadResource
MultiByteToWideChar
ReadFile
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
lstrcpynA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ntdll

RtlFreeUnicodeString
RtlInitString
RtlInitUnicodeString
RtlLeaveCriticalSection
RtlNtStatusToDosError
RtlUnlockHeap
swprintf
wcsncpy
RtlEnterCriticalSection
RtlFreeSid

rpcrt4

I_UuidCreate
NdrFullPointerQueryPointer
NdrMesTypeAlignSize
NdrNonConformantStringBufferSize
I_RpcTransDatagramFree
NdrServerContextNewUnmarshall
NdrServerInitializeMarshall
NdrVaryingArrayUnmarshall
RpcServerRegisterIfEx
RpcServerTestCancel
RpcServerUseProtseqEpA
char_from_ndr
I_RpcTransDatagramAllocate2
NdrOleAllocate

crtdll

fseek
fputs
cos
_seterrormode
_memicmp

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a0a13edd732e583506aec6bace5f5c7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

version

ntdll

rpcrt4

crtdll

Sections

.text Size: 26KB - Virtual size: 26KB

.data Size: 72KB - Virtual size: 111KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 26KB - Virtual size: 26KB

.data
Size: 72KB - Virtual size: 111KB

.rsrc
Size: 20KB - Virtual size: 19KB