a55f9152a2d21944d80a6162d0f4a13a7fc10b5ec2e3697a0f2967f08e504d4e

Sharing

Copy URL Twitter E-mail

General

Target

a55f9152a2d21944d80a6162d0f4a13a7fc10b5ec2e3697a0f2967f08e504d4e
Size

141KB
MD5

810fc32b7d2262593e9ef1e02197219e
SHA1

ad3a22049482d02a059e7dabe10af487b41ce962
SHA256

a55f9152a2d21944d80a6162d0f4a13a7fc10b5ec2e3697a0f2967f08e504d4e
SHA512

a89717381a7f94605e1d5dd963a013d579ca07c01b1901fadbed4a2f91840b1a147bc794bfbb017d33effc33daf2824d9637b4b0d3732dedf1bfa04489a6b3a6
SSDEEP

3072:icH20L07jJEqxCkX/LlgAXtZkMTrMv5LjmooRHo:icH2jGqxCMJXtZkOMv5LjvoB

Score

N/A

Malware Config

Signatures

Files

a55f9152a2d21944d80a6162d0f4a13a7fc10b5ec2e3697a0f2967f08e504d4e
.dll windows x86

78f5792346f8f78ef31c27c2642e1b7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
TlsFree
GetACP
GetCPInfo
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
lstrcmpiA
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
LoadLibraryA
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
FlushFileBuffers
CloseHandle
SetStdHandle
GetLocaleInfoW

oleaut32

SysAllocStringByteLen
SysFreeString

crpe32

ord56
ord55
ord41
ord1010
ord1009
ord48
ord54
ord62
ord63
ord109
ord37
ord127
ord123
ord58
ord57
ord60
ord59
ord67

Exports

Exports

PEGetGraphOptions4
PEGetJobStatus4
PEGetNthTableSessionInfo4
PEGetNthTableType4
PELogOffServer4
PELogOnServer4
PESetGraphOptions4
PESetNthTableSessionInfo4
crPEDateToYearMonthDay
crPEExportToApp
crPEExportToDisk
crPEExportToExch
crPEExportToHTML
crPEExportToMapi
crPEExportToNotes
crPEExportToODBC
crPEExportToVIM
crPEGetGraphOptions
crPEGetNthParameterField
crPEGetNthParameterType
crPEGetNthTableLocation
crPEGetNthTableLogOnInfo
crPEGetNthTableSessionInfo
crPEGetSelectedPrinter
crPEHourMinuteSecondToTime
crPELogOffServer
crPELogOnServer
crPESelectPrinter
crPESetGraphOptions
crPESetNthParameterField
crPESetNthTableLocation
crPESetNthTableLogOnInfo
crPESetNthTableSessionInfo
crPEYearMonthDayToDate
crTimeToHourMinuteSecond
crvbHandleToBStr
crvbPEGetGraphOptions
crvbPEGetNthParameterField
crvbPEGetNthTableLocation
crvbPEGetNthTableLogOnInfo
crvbPEGetNthTableSessionInfo
crvbPEGetSelectedPrinter

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78f5792346f8f78ef31c27c2642e1b7d

Headers

File Characteristics

Imports

kernel32

oleaut32

crpe32

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 37KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 90KB - Virtual size: 109KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 37KB - Virtual size: 37KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 90KB - Virtual size: 109KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB