abed1e17853bed235371c2be8439f45273f623d0de58f6296ceb59a4e38aab15

Sharing

Copy URL Twitter E-mail

General

Target

abed1e17853bed235371c2be8439f45273f623d0de58f6296ceb59a4e38aab15
Size

125KB
MD5

0a4af00a53ab3939461db107fea58ee0
SHA1

2cbeb2acdbac815828a9fee2ec9ee3cf83bda1fa
SHA256

abed1e17853bed235371c2be8439f45273f623d0de58f6296ceb59a4e38aab15
SHA512

053484a7d910f43ada6778ac3bc65070ec2c10e3af84f9a54629148d905c333fff96ff29dbcf6cc18c4b9f3dc54d6618c3d5575fc9c60f7881f2ce49768b792f
SSDEEP

3072:4izUt541J4USkXcx9sio556/j4dSFqo7vLD5Srd5C:atWb4LkXcxOdSFVVSZ5

Score

N/A

Malware Config

Signatures

Files

abed1e17853bed235371c2be8439f45273f623d0de58f6296ceb59a4e38aab15
.dll windows x86

223356b039f7ab08289d87b238126d13

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathW
GetLastError
HeapFree
HeapAlloc
CreateDirectoryW
GetFileAttributesW
GetCurrentThreadId
GetCommandLineA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessW
HeapSize
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
CreateFileA
FlushFileBuffers

Exports

Exports

MM_InitWrapper

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

223356b039f7ab08289d87b238126d13

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 49KB - Virtual size: 48KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB

.rmnet
Size: 56KB - Virtual size: 60KB