c3740f1c50f654b95cb4f8833c2a6817ee238fe8b750844fb390deabf5e50a71

Sharing

Copy URL Twitter E-mail

General

Target

c3740f1c50f654b95cb4f8833c2a6817ee238fe8b750844fb390deabf5e50a71
Size

814KB
MD5

e7d39beb42747765dc6d75c7ce72bccc
SHA1

d57a8c3ee6805a7967216cc0dc02a85ba9cf8ced
SHA256

c3740f1c50f654b95cb4f8833c2a6817ee238fe8b750844fb390deabf5e50a71
SHA512

732725723c6186df56390768a1f4c1eb50898b90fb4f8660d60af0efa6bd6866d4319a71081d3d955c6e8aad3657eca75ae0c844d302b60428c3a0e18553c058
SSDEEP

24576:NYnjpml5cKgHlBs9wcW3r2EeZ3jO63cyUvCVTJonh/M:NYjK5cKlZzCa+S

Score

N/A

Malware Config

Signatures

Files

c3740f1c50f654b95cb4f8833c2a6817ee238fe8b750844fb390deabf5e50a71
.dll windows x86

4f6c975ec2aa6a8ffed3b53cd9dcf26d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
GetCurrentProcess
GetModuleHandleW
ReadFile
SizeofResource
WriteFile
CreateMutexA
OpenProcess
GetCommandLineA
Sleep
OpenMutexA
LockResource
LoadLibraryW
CreateThread
LoadResource
GetFileSize
GetProcAddress
ReadProcessMemory
WideCharToMultiByte
CreateProcessA
GetTickCount
GetModuleFileNameA
OutputDebugStringA
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
CreateFileMappingA
CloseHandle
CreateFileA
CreateFileW
WriteConsoleW
DecodePointer
FindResourceW
UnmapViewOfFile
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
EncodePointer
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
HeapFree
HeapAlloc
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetFileAttributesExW
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
VirtualQuery

advapi32

RegCloseKey
RegOpenKeyExA

psapi

GetProcessImageFileNameA

iphlpapi

GetAdaptersInfo

ntdll

NtTerminateProcess
NtQueryInformationProcess
NtProtectVirtualMemory

Exports

Exports

MiFeng

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RXJH0
Size: 583KB - Virtual size: 583KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f6c975ec2aa6a8ffed3b53cd9dcf26d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

psapi

iphlpapi

ntdll

Exports

Exports

Sections

.text Size: 89KB - Virtual size: 89KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 3KB - Virtual size: 7KB

.gfids Size: 512B - Virtual size: 272B

.RXJH0 Size: 583KB - Virtual size: 583KB

.reloc Size: 5KB - Virtual size: 5KB

.rsrc Size: 100KB - Virtual size: 99KB

.text
Size: 89KB - Virtual size: 89KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 3KB - Virtual size: 7KB

.gfids
Size: 512B - Virtual size: 272B

.RXJH0
Size: 583KB - Virtual size: 583KB

.reloc
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 100KB - Virtual size: 99KB