c890e1e5c3f652fbb38f142797cd7fb1c35ad697514eb348ede127746b204ffc

Sharing

Copy URL Twitter E-mail

General

Target

c890e1e5c3f652fbb38f142797cd7fb1c35ad697514eb348ede127746b204ffc
Size

92KB
MD5

5fc5ee5f4a0921ddf3b5c187cd6ad754
SHA1

704547b5d516c7d57a2ed08056674cff2fd6a179
SHA256

c890e1e5c3f652fbb38f142797cd7fb1c35ad697514eb348ede127746b204ffc
SHA512

343b0646e486c7eff4a1086920d30424a5c095671d7204e982138d124138eb7233a3b549fd8a595dc0e32687eee4d7bbdaea370ef922d5b24b7185f00adc7352
SSDEEP

1536:NMnqboNWPtNNgQEpSpJE+3FUm1lYfJt5Kci2lG7N0mItoRi4j:NMnqbowPt4QwwJ3ehqB7NMoR

Score

N/A

Malware Config

Signatures

Files

c890e1e5c3f652fbb38f142797cd7fb1c35ad697514eb348ede127746b204ffc
.dll windows x86

2c1a483c3c1dcf0d77e30bec401a94b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetLastError
TlsSetValue
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
TlsFree
CreateMutexA
CloseHandle
ReleaseMutex
WaitForSingleObject
GetSystemDirectoryA
LoadLibraryA
FormatMessageA
GetProcAddress
FreeLibrary

msvcrt

_vsnprintf
sprintf
strlen
strerror
strncpy
strcpy
_strdup
malloc
_errno
_assert
abort
free
strchr
strcmp
strtoul
strcat
realloc
calloc
_stat

ws2_32

gethostbyname
gethostbyaddr
getservbyport
ntohs
inet_addr
htons
getservbyname
htonl
inet_ntoa
WSASetLastError
WSAGetLastError

Exports

Exports

krb5int_clear_error
krb5int_close_plugin
krb5int_close_plugin_dirs
krb5int_free_error
krb5int_free_plugin_dir_data
krb5int_free_plugin_dir_func
krb5int_freeaddrinfo
krb5int_gai_strerror
krb5int_get_error
krb5int_get_plugin_data
krb5int_get_plugin_dir_data
krb5int_get_plugin_dir_func
krb5int_get_plugin_func
krb5int_getaddrinfo
krb5int_getnameinfo
krb5int_getspecific
krb5int_gmt_mktime
krb5int_in6addr_any
krb5int_key_delete
krb5int_key_register
krb5int_mutex_alloc
krb5int_mutex_free
krb5int_mutex_lock
krb5int_mutex_lock_update_stats
krb5int_mutex_report_stats
krb5int_mutex_unlock
krb5int_mutex_unlock_update_stats
krb5int_open_plugin
krb5int_open_plugin_dirs
krb5int_pthread_loaded
krb5int_set_error
krb5int_set_error_info_callout_fn
krb5int_setspecific
krb5int_vset_error

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2c1a483c3c1dcf0d77e30bec401a94b9

Headers

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 992B

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 992B

.rmnet
Size: 60KB - Virtual size: 60KB