2fb52aec36000e6b09e144cc47cddf296e07961cb4369887bb94172a139e4034

Sharing

Copy URL Twitter E-mail

General

Target

2fb52aec36000e6b09e144cc47cddf296e07961cb4369887bb94172a139e4034
Size

124KB
MD5

3f259a8006837766cb8e3dab7835efc0
SHA1

d45b95bb70df8db754dd8d62fa38524a0554579f
SHA256

2fb52aec36000e6b09e144cc47cddf296e07961cb4369887bb94172a139e4034
SHA512

2b55f46accbe68ae973a8773de9b970c1466458b261f4e6f8e1f516417677e944bb42fabfb804c0097a3e49522a7b4e48883f81c57250b72df03a1cbff8b7023
SSDEEP

3072:ZNcL2JHWuKwHpVEsg5UHHczKjeF2ruZ7:ZNcLwWuKwHpVEsfHH6Aey

Score

N/A

Malware Config

Signatures

Files

2fb52aec36000e6b09e144cc47cddf296e07961cb4369887bb94172a139e4034
.dll windows x86

59372cfc4682f7d362df3997ded11aaf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
CloseHandle
WaitForSingleObject
ReleaseMutex
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
DisableThreadLibraryCalls

msvcr71

?terminate@@YAXXZ
_except_handler3
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??1type_info@@UAE@XZ
strncpy
isupper
tolower
fclose
strncmp
atoi
fread
fopen
fgetpos
fsetpos
sprintf
memmove
_purecall
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??_U@YAPAXI@Z
__CxxFrameHandler
??2@YAPAXI@Z
??_V@YAXPAX@Z
??3@YAXPAX@Z
_CxxThrowException
??0exception@@QAE@ABV0@@Z
_putenv
_stricmp
strchr

msvcp71

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

Exports

Exports

RMACreateInstance
RMAShutdown
SetDLLAccessPath

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

59372cfc4682f7d362df3997ded11aaf

Headers

File Characteristics

Imports

kernel32

msvcr71

msvcp71

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 500B

.rsrc Size: 4KB - Virtual size: 760B

.reloc Size: 4KB - Virtual size: 2KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 500B

.rsrc
Size: 4KB - Virtual size: 760B

.reloc
Size: 4KB - Virtual size: 2KB

.rmnet
Size: 60KB - Virtual size: 60KB