581fff59085c2bf82b4ba06a55102bc62a133b5e1b67f7100ade54034724cc9b

Sharing

Copy URL

Twitter E-mail

General

Target

581fff59085c2bf82b4ba06a55102bc62a133b5e1b67f7100ade54034724cc9b
Size

228KB
MD5

801a84da23b2df1892152e440bb8a84e
SHA1

5fd51a8776498a179249b99d33cce9dac6dad5a7
SHA256

581fff59085c2bf82b4ba06a55102bc62a133b5e1b67f7100ade54034724cc9b
SHA512

570b53990f8c38471cefa9ed9431c1a25458d8555c541ec49bd9a7d6f80fae2483cdde028b9eb8fc024a68ac0dd0398df768fa0d56ad6802e1dea32deca14f21
SSDEEP

3072:gJYp0BejpRlTgenKL+K31mcDUAOabQpvYxs7pFikMNriluPKeXti7CA3OUK:gJG0Be7qywSAqT1FipWuPKe9GH

Score

N/A

Malware Config

Signatures

Files

581fff59085c2bf82b4ba06a55102bc62a133b5e1b67f7100ade54034724cc9b
.dll windows x86

6d5de578f7b910cd8cd28311bfac5278

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pncrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
_findclose
_purecall
_findnext
_findfirst
sscanf
_ismbcspace
strncpy
strtok
strchr
printf
_endthreadex
_beginthreadex
sprintf
_ftol
_vsnprintf
free
_stricmp
_ftime
_stat
_itoa
_putenv
_strcmpi
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
memmove
atoi
strstr
strncmp
realloc
malloc
strrchr

kernel32

Sleep
CreateEventA
SetEvent
DeleteCriticalSection
LeaveCriticalSection
GetVersion
GetSystemInfo
GetProcAddress
GetVersionExA
SetErrorMode
LoadLibraryA
FreeLibrary
InterlockedDecrement
ResetEvent
GetLastError
WaitForSingleObject
CloseHandle
GetCurrentThreadId
GetThreadPriority
SetThreadPriority
ResumeThread
SuspendThread
GetTickCount
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedIncrement
GetSystemDirectoryA
EnterCriticalSection

user32

CharNextA
GetSystemMetrics
PeekMessageA
DispatchMessageA
GetMessageA
PostMessageA
PostThreadMessageA
KillTimer
SetTimer
CharLowerA

advapi32

RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegQueryValueA

Exports

Exports

RNGetRootObjectContext
RNGetRootObjectFactory
RNSetupObjectBroker
RNShutdownObjectBroker
SetDLLAccessPath

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6d5de578f7b910cd8cd28311bfac5278

Headers

File Characteristics

Imports

pncrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 968B

.reloc Size: 8KB - Virtual size: 6KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 968B

.reloc
Size: 8KB - Virtual size: 6KB

.rmnet
Size: 60KB - Virtual size: 60KB