e3c5a79f3a1bc71654de399c77ce3983e9c3d261a771b3239d85f25e9ae61efd

Sharing

Copy URL Twitter E-mail

General

Target

e3c5a79f3a1bc71654de399c77ce3983e9c3d261a771b3239d85f25e9ae61efd
Size

92KB
MD5

34c2f404fb12fb50dfa0cab5c4ce081d
SHA1

ac469e37a0f3986671e4b45d469d17fc02079890
SHA256

e3c5a79f3a1bc71654de399c77ce3983e9c3d261a771b3239d85f25e9ae61efd
SHA512

af4433e0776ef708dd37de3ed22ed3bbb4b7cc12fc47905d5cabcfcd884923ea9978176c60560eb0db301eae43d834e41ff711b7dc2bc9769d8605493cfc7cd2
SSDEEP

1536:ETIJTu9K1o7T45N1BE7vUEUceGvpdm/kbZdvPW3GIHsA3tpv:ELgo0NUIrkVpoGIHb3

Score

N/A

Malware Config

Signatures

Files

e3c5a79f3a1bc71654de399c77ce3983e9c3d261a771b3239d85f25e9ae61efd
.dll windows x86

7f2051be675aabe97a145bf60758cb5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rbclib

_RBC_SetWindowList@8
_RBC_SetTimeout@8
_RBC_Read@16
_RBC_CustomIN@20
_RBC_Write@16
_RBC_ReadCapacity@12
_RBC_StartStop@8
_RBC_PreventRemoval@8
_RBC_RequestSense@16
_RBC_Inquiry@16
_RBC_TestReady@4
_RBC_ListDevice@8
_RBC_CloseDev@4
_RBC_OpenDev@8

kernel32

DeleteCriticalSection
GetModuleFileNameA
RtlUnwind
GetStringTypeW
LCMapStringW
LCMapStringA
GetStringTypeA
LoadLibraryA
GetProcAddress
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
GetACP
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc

Exports

Exports

BLK_CloseDev
BLK_Format
BLK_Inquiry
BLK_ListDevice
BLK_MediumRemoval
BLK_OpenDev
BLK_Read
BLK_ReadCapacity
BLK_RequestSense
BLK_SetOption
BLK_SetTimeout
BLK_SetWindowList
BLK_StartStop
BLK_TestMediaReady
BLK_Write
DllMain
_BLK_CloseDev@4
_BLK_Format@4
_BLK_Inquiry@12
_BLK_ListDevice@8
_BLK_MediumRemoval@8
_BLK_OpenDev@8
_BLK_Read@20
_BLK_ReadCapacity@12
_BLK_RequestSense@4
_BLK_SetOption@8
_BLK_SetTimeout@8
_BLK_SetWindowList@8
_BLK_StartStop@8
_BLK_TestMediaReady@4
_BLK_Write@20

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7f2051be675aabe97a145bf60758cb5a

Headers

File Characteristics

Imports

rbclib

kernel32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 1KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 16KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 1KB

.rmnet
Size: 60KB - Virtual size: 60KB