3a1e816a01d47f29c47e88b60e133a081e618e4b3a937b29ab05eca18ba24161

Sharing

Copy URL Twitter E-mail

General

Target

3a1e816a01d47f29c47e88b60e133a081e618e4b3a937b29ab05eca18ba24161
Size

113KB
MD5

62431547011ecabeb7533bb8d8d1aeb7
SHA1

5aa41b87f0f274d2efddbd458834f65ea8ff40d1
SHA256

3a1e816a01d47f29c47e88b60e133a081e618e4b3a937b29ab05eca18ba24161
SHA512

31961bcfb99e76db974888af573f9c6f3544bf0d189ad2f927cbe384062e878f3eba4411fb05175721cfc077225344bae55b43de05aee1dcc22a110e0bd5daf5
SSDEEP

1536:jNwzsgZ15O9VA/8kZXD3INNXciU0lHvbg7O6mW5bgEh38lfr:jIz1Qa/9jINtcH0+V72EVS

Score

N/A

Malware Config

Signatures

Files

3a1e816a01d47f29c47e88b60e133a081e618e4b3a937b29ab05eca18ba24161
.dll windows x86

e2e3250c9a4f6cd6bdb284530b355822

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
free
??0exception@@QAE@XZ
_callnewh
malloc
_XcptFilter
_initterm
memcpy
wcscat_s
memset
wcscpy_s
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
?what@exception@@UBEPBDXZ
??1type_info@@UAE@XZ
__CxxFrameHandler3
_CxxThrowException
_amsg_exit

kernel32

QueryPerformanceCounter
LeaveCriticalSection
LocalFree
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
HeapCreate
DisableThreadLibraryCalls
HeapDestroy
DeleteCriticalSection
DelayLoadFailureHook
GetProcAddress
GetLastError
FreeLibrary
InterlockedCompareExchange
LoadLibraryExA
InterlockedExchange
Sleep
EnterCriticalSection
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
GetProcessHeap
HeapAlloc
LocalAlloc
RegCloseKey
LocalReAlloc
RegCreateKeyExW
RegSetValueExW

advapi32

UnregisterTraceGuids
EventWrite
TraceMessage
EventUnregister
EventRegister
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags

shlwapi

SHRegGetValueW
ord219

dot3api

Dot3InitPlapParams
Dot3DeinitPlapParams
Dot3CancelPlap
Dot3QueryPlapCredentials
Dot3FreeMemory
Dot3DoPlap

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

user32

GetSystemMetrics
LoadStringW

ntdll

RtlImageNtHeader
RtlAllocateHeap
RtlFreeHeap

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2e3250c9a4f6cd6bdb284530b355822

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

advapi32

shlwapi

dot3api

ole32

user32

ntdll

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 36KB

.data Size: 60KB - Virtual size: 61KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 36KB - Virtual size: 36KB

.data
Size: 60KB - Virtual size: 61KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 3KB - Virtual size: 2KB