2035e8068f6e48cc2f737a5244eb3a8a1b3fd70ed97f91f82d213503743c7130

Sharing

Copy URL Twitter E-mail

General

Target

2035e8068f6e48cc2f737a5244eb3a8a1b3fd70ed97f91f82d213503743c7130
Size

160KB
MD5

408de64aeae5aaeb9a8736eca99cb2fb
SHA1

3d0562c43dffb5118fc2b1f9246fae887568e920
SHA256

2035e8068f6e48cc2f737a5244eb3a8a1b3fd70ed97f91f82d213503743c7130
SHA512

a6f4f1f1a8978962a8b0426124127e3d752524face3e574428a72a65fc22427900c364c2afb71c32b881ed275e343221a058587257c4464d5f9725e2dfe21e15
SSDEEP

3072:szMgP9p4SQtn7ul5coSDauIE92TAKZAQOJisLuv:4JPzQ7joSDaZTNyfLu

Score

N/A

Malware Config

Signatures

Files

2035e8068f6e48cc2f737a5244eb3a8a1b3fd70ed97f91f82d213503743c7130
.dll windows x86

5af9c1a0799f95377d984dffe6164382

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

xmltok

XmlPrologStateInitExternalEntity
XmlGetUtf16InternalEncodingNS
XmlPrologStateInit
XmlGetUtf16InternalEncoding
XmlUtf16Encode
XmlParseXmlDeclNS
XmlParseXmlDecl
XmlInitEncodingNS
XmlInitEncoding
XmlSizeOfUnknownEncoding
XmlInitUnknownEncodingNS
XmlInitUnknownEncoding

kernel32

GetModuleFileNameA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetLastError
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
DisableThreadLibraryCalls
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter

Exports

Exports

XML_DefaultCurrent
XML_ErrorString
XML_ExternalEntityParserCreate
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetIdAttributeIndex
XML_GetSpecifiedAttributeCount
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserFree
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetExternalParsedEntityDeclHandler
XML_SetInternalParsedEntityDeclHandler
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_UseParserAsHandlerArg

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5af9c1a0799f95377d984dffe6164382

Headers

File Characteristics

Imports

xmltok

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 100KB - Virtual size: 98KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 100KB - Virtual size: 98KB

.reloc
Size: 4KB - Virtual size: 1KB