d2ac4841b902e60eaf662bb0e5361c375f8cb8ddb989001991b325d2db2c0e82

Sharing

Copy URL Twitter E-mail

General

Target

d2ac4841b902e60eaf662bb0e5361c375f8cb8ddb989001991b325d2db2c0e82
Size

128KB
MD5

083601dac4b479701d2356650a51f010
SHA1

7785b799568f3a9b5bcc39ed2c2f01ee7c866556
SHA256

d2ac4841b902e60eaf662bb0e5361c375f8cb8ddb989001991b325d2db2c0e82
SHA512

47d52373c045c13ea82693ba03664a8c1207d4d9b26d2ba80f8630bcad5d295110141586c9f1f6dff7ca27ae2021098940b974cd7b3e82458cdd1a0dfaf04bdd
SSDEEP

3072:aygikS+uc08oCsCHsUBNhlDu1OaV8aEc1M:cbk6syBJaVhEj

Score

N/A

Malware Config

Signatures

Files

d2ac4841b902e60eaf662bb0e5361c375f8cb8ddb989001991b325d2db2c0e82
.dll windows x86

3da9e8e08e678965de2314ad2b7e6f7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
CloseHandle
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

user32

SendMessageA
IsWindow
KillTimer
SetTimer
LoadCursorA
RegisterClassExA
DefWindowProcA
CreateWindowExA
DestroyWindow

Exports

Exports

?Func_@@YAXXZ
?Func_C@@YAXHH@Z
?Func_PASCAL@@YGXXZ
Fucn_C_Pascal_Def
Func_C
Func_Def
InitChannel
SendDataPack
_Fucn_C_PASCAL@0
_SetRecvDataCallback@4

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3da9e8e08e678965de2314ad2b7e6f7a

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 12KB - Virtual size: 17KB

.reloc Size: 8KB - Virtual size: 4KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 12KB - Virtual size: 17KB

.reloc
Size: 8KB - Virtual size: 4KB

.rmnet
Size: 60KB - Virtual size: 60KB