9442ac16070a9d35c2e833c0771066acdfb770fc65a6eb9fd4a021b1da182531

Sharing

Copy URL Twitter E-mail

General

Target

9442ac16070a9d35c2e833c0771066acdfb770fc65a6eb9fd4a021b1da182531
Size

228KB
MD5

6145fd24460a15e7ab44e43b38479890
SHA1

a7388fd5b577ea8ccd20d19acc0b68222b591910
SHA256

9442ac16070a9d35c2e833c0771066acdfb770fc65a6eb9fd4a021b1da182531
SHA512

9062155397e0c16c1030b6a9e2310889b7ce46cfd2a979b9432e71e4f7c1c72e4c53352e105ee730f4fa3b678a8c083fbe00b552b0d53346790fd0aa721f2e0a
SSDEEP

3072:gJYp0BejpRlTgenKL+K31mcDUAOabQpvYxs7pFikMN47Tec/+0n0fcqrfW6n75:gJG0Be7qywSAqT1FiKb+0nXq3

Score

N/A

Malware Config

Signatures

Files

9442ac16070a9d35c2e833c0771066acdfb770fc65a6eb9fd4a021b1da182531
.dll windows x86

6d5de578f7b910cd8cd28311bfac5278

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pncrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
_findclose
_purecall
_findnext
_findfirst
sscanf
_ismbcspace
strncpy
strtok
strchr
printf
_endthreadex
_beginthreadex
sprintf
_ftol
_vsnprintf
free
_stricmp
_ftime
_stat
_itoa
_putenv
_strcmpi
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
memmove
atoi
strstr
strncmp
realloc
malloc
strrchr

kernel32

Sleep
CreateEventA
SetEvent
DeleteCriticalSection
LeaveCriticalSection
GetVersion
GetSystemInfo
GetProcAddress
GetVersionExA
SetErrorMode
LoadLibraryA
FreeLibrary
InterlockedDecrement
ResetEvent
GetLastError
WaitForSingleObject
CloseHandle
GetCurrentThreadId
GetThreadPriority
SetThreadPriority
ResumeThread
SuspendThread
GetTickCount
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedIncrement
GetSystemDirectoryA
EnterCriticalSection

user32

CharNextA
GetSystemMetrics
PeekMessageA
DispatchMessageA
GetMessageA
PostMessageA
PostThreadMessageA
KillTimer
SetTimer
CharLowerA

advapi32

RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegQueryValueA

Exports

Exports

RNGetRootObjectContext
RNGetRootObjectFactory
RNSetupObjectBroker
RNShutdownObjectBroker
SetDLLAccessPath

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6d5de578f7b910cd8cd28311bfac5278

Headers

File Characteristics

Imports

pncrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 968B

.reloc Size: 8KB - Virtual size: 6KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 968B

.reloc
Size: 8KB - Virtual size: 6KB

.rmnet
Size: 60KB - Virtual size: 60KB