66af15e8bcf316d7957af8678a8165a5f76b30ce9cd80a48041c672efa6048e2

Sharing

Copy URL Twitter E-mail

General

Target

66af15e8bcf316d7957af8678a8165a5f76b30ce9cd80a48041c672efa6048e2
Size

100KB
MD5

2b4c67deba8e294800218e7245ca61f0
SHA1

d67746ddce2c4aa67854bed091e61663dae16e06
SHA256

66af15e8bcf316d7957af8678a8165a5f76b30ce9cd80a48041c672efa6048e2
SHA512

4eb0db14c1c6a534b3ed9f9c61fdece7b15f990c0f84110d6914e9ff9c0cf5f6cdccd8739271a2a046d96b9604fdb9f519f7daceef43dae2e131f8482f70cfbe
SSDEEP

1536:P3o+DGP6YchTBpk8eZhDutdQTo8l0XErNXP1rgwgMNSZxDzI+Bbgo5d:fqCVneZhD2aoIVrpdrjgySZbB/5d

Score

N/A

Malware Config

Signatures

Files

66af15e8bcf316d7957af8678a8165a5f76b30ce9cd80a48041c672efa6048e2
.dll windows x86

cfbf488638d674f773dfc46c36813348

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetSystemTime
GetModuleFileNameA
CloseHandle
GetLastError
DeleteFileA
SetFileAttributesA
GetFileAttributesA
RemoveDirectoryA
LocalFree
FindClose
FindNextFileA
FindFirstFileA
LocalAlloc
CreateDirectoryA
lstrcmpA
CopyFileA
MultiByteToWideChar
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
InterlockedDecrement
InterlockedIncrement
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
RtlUnwind
FlushFileBuffers

user32

FindWindowA
SendMessageA

shell32

SHGetSpecialFolderPathA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Exports

Exports

InstallRAID_Utility
UninstallRAID_Utility

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cfbf488638d674f773dfc46c36813348

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 9KB

.reloc Size: 4KB - Virtual size: 3KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 9KB

.reloc
Size: 4KB - Virtual size: 3KB

.rmnet
Size: 60KB - Virtual size: 60KB