3a1b5a85ae67e10a4d5407e7fec0264514e54fdb05435e821e7ef0b7095167bc

Sharing

Copy URL Twitter E-mail

General

Target

3a1b5a85ae67e10a4d5407e7fec0264514e54fdb05435e821e7ef0b7095167bc
Size

85KB
MD5

4d56bf4cadccba79c46dffbb898f74c0
SHA1

366a1ed5a10c7ddd60314fb21bb88b472ebe145b
SHA256

3a1b5a85ae67e10a4d5407e7fec0264514e54fdb05435e821e7ef0b7095167bc
SHA512

8888c95a429404731e523faa87e68c59c2e5e7497f28bd9f6eff18c1fd00ec8ce24765cabf87055c69ceab7ecbd7e2d2c14231d6b241381cad2b1eb030081be0
SSDEEP

1536:0v97qSAaYYOtABZmoQ8iXRB+WdycyHQRmXtCaZB4B3CH2jfTGJv:0vlqxjYOtABZmoG2WPyHomXIaZit

Score

N/A

Malware Config

Signatures

Files

3a1b5a85ae67e10a4d5407e7fec0264514e54fdb05435e821e7ef0b7095167bc
.dll windows x86

13a1a81bfd09aa095fc471ce536c2497

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileW
ReplaceFileW
MoveFileW
DeleteFileW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CompareStringW
Sleep
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
WaitForSingleObject
GetCurrentThread
SetThreadPriority
GetExitCodeThread
CloseHandle
CreateThread
GetTickCount
GetTempPathW
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
LoadLibraryA
FreeLibrary
GetProcAddress
LocalAlloc
InterlockedExchange
CreateEventW
SetEvent
SetUnhandledExceptionFilter
IsDebuggerPresent
UnhandledExceptionFilter

user32

wsprintfW

msvcr90

??3@YAXPAX@Z
fwrite
fclose
sprintf
??_V@YAXPAX@Z
realloc
_purecall
swscanf
vsprintf
wcstol
wcstod
_ui64tow
_vscprintf
_i64tow
rand
_aligned_malloc
??2@YAPAXI@Z
__CxxFrameHandler3
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_close
_read
fread
fgetc
_errno
_wfopen
fflush
_fseeki64
_chsize_s
ungetc
calloc
feof
_fstat64
_fileno
_wstat64
malloc
free
_wopen
_strdup
memcpy
_time64
memset

shlwapi

UrlGetPartW
PathIsURLW
PathCombineW

Exports

Exports

NXDataCreate
NXDataCreateEmpty
NXDataCreateFromURI
NXDataCreateWithSize
NXDataGet
NXDataGetDescription
NXDataGetMIME
NXDataGetSourceStat
NXDataGetSourceURI
NXDataRelease
NXDataRetain
NXDataSetDescription
NXDataSetMIME
NXDataSetSourceStat
NXDataSetSourceURI
NXDataSize
NXFileEndOfFile
NXFileLength
NXFileLockRegion
NXFileOpenFile
NXFileOpenProgressiveDownloader
NXFilePeekByte
NXFileProgressiveDownloaderAvailable
NXFileRead
NXFileRelease
NXFileRetain
NXFileSeek
NXFileStat
NXFileSync
NXFileTell
NXFileTruncate
NXFileUnlockRegion
NXFileWrite
NXFile_fstat
NXFile_move
NXFile_stat
NXFile_statFILE
NXFile_unlink
NXOnce
NXOnceInit
NXPathIsURL
NXPathMatchExtension
NXPathMatchExtensionList
NXPathProtocol
NXSleep
NXSleepYield
NXStringCompare
NXStringCreate
NXStringCreateBasePathFromFilename
NXStringCreateEmpty
NXStringCreateFromPath
NXStringCreateFromUInt64
NXStringCreateFromUTF8
NXStringCreateWithBytes
NXStringCreateWithCString
NXStringCreateWithFormatting
NXStringCreateWithHeap
NXStringCreateWithInt64
NXStringCreateWithUInt64
NXStringCreateWithUTF16
NXStringCreateWithUTF8
NXStringGetBytes
NXStringGetBytesDirect
NXStringGetBytesSize
NXStringGetCString
NXStringGetDoubleValue
NXStringGetGUIDValue
NXStringGetIntegerValue
NXStringGetLength
NXStringKeywordCaseCompare
NXStringKeywordCompare
NXStringKeywordCompareWithCString
NXStringMalloc
NXStringMallocWithHeap
NXStringRealloc
NXStringRelease
NXStringRetain
NXStringSetHeap
NXThreadCreate
NXThreadCurrentSetPriority
NXThreadJoin
NXURICreateFromPath
NXURICreateRemovingFilename
NXURICreateTemp
NXURICreateTempForFilepath
NXURICreateTempWithExtension
NXURICreateWithNXString
NXURICreateWithPath
NXURICreateWithUTF8
NXURIGetLength
NXURIGetNXString
NXURIMalloc
NXURIRelease
NXURIRetain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

13a1a81bfd09aa095fc471ce536c2497

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcr90

shlwapi

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.rmnet
Size: 56KB - Virtual size: 60KB