be7d9ea49ebbc21fd8c4ff5abee195de0390d9e60acc38b3f887990da8c7ac50

Sharing

Copy URL Twitter E-mail

General

Target

be7d9ea49ebbc21fd8c4ff5abee195de0390d9e60acc38b3f887990da8c7ac50
Size

308KB
MD5

965de910aadced75d649fc88115777f9
SHA1

4d405a5dc21b724068f731fd7e6476bdb5c5fdb8
SHA256

be7d9ea49ebbc21fd8c4ff5abee195de0390d9e60acc38b3f887990da8c7ac50
SHA512

cd363ce6b38074047f938ba3f8400f2ca0a7a74196cd4a06256d0ad0e40e4a7524a9756a46e9ab5ed916ffea04f3bf76f38b426baf2471a02c3834f0b82342d5
SSDEEP

6144:lDPu5FgIAS1rhMFrPUCFpcDQSIFzfNhu506731TM:liLg6MPfpczAzPuZm

Score

N/A

Malware Config

Signatures

Files

be7d9ea49ebbc21fd8c4ff5abee195de0390d9e60acc38b3f887990da8c7ac50
.dll windows x86

e8e048d1ce73d59a8c467b770452b41f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
FormatMessageA
GetStdHandle
AllocConsole
GetLastError
CreateThread
GetCurrentThread
SetThreadAffinityMask
SetThreadPriority
ResumeThread
CloseHandle
GetEnvironmentVariableA
SetEnvironmentVariableA
GetProcAddress
LoadLibraryA
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
ResetEvent
WaitForSingleObject
SetEvent
Sleep
TlsSetValue
TlsGetValue
GetProcessAffinityMask
GetCurrentProcess
GetSystemInfo
TlsAlloc
QueryPerformanceFrequency
TlsFree
TerminateThread
QueryPerformanceCounter
GetCurrentThreadId
DuplicateHandle
GetExitCodeThread
SleepEx
VirtualQuery
ExitProcess
TerminateProcess
SetStdHandle
GetFileType
HeapAlloc
HeapFree
LocalFree
HeapReAlloc
SetConsoleCtrlHandler
GetCommandLineA
GetVersion
GetModuleHandleA
FlushFileBuffers
WriteFile
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
WideCharToMultiByte
RtlUnwind
InterlockedDecrement
InterlockedIncrement
SetLastError
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
ReadFile

Exports

Exports

KMP_ALIGNED_SHARABLE_MALLOC
KMP_CALLOC
KMP_DEFERRED_ATOMIC_ADD_I4
KMP_DEFERRED_ATOMIC_ADD_I8
KMP_DEFERRED_ATOMIC_ADD_R4
KMP_DEFERRED_ATOMIC_ADD_R8
KMP_FREE
KMP_GET_BLOCKTIME
KMP_GET_LIBRARY
KMP_GET_NUM_KNOWN_THREADS
KMP_GET_STACKSIZE
KMP_GET_STACKSIZE_S
KMP_LOCK_COND_BROADCAST
KMP_LOCK_COND_SIGNAL
KMP_LOCK_COND_WAIT
KMP_MALLOC
KMP_NEST_LOCK_COND_BROADCAST
KMP_NEST_LOCK_COND_SIGNAL
KMP_NEST_LOCK_COND_WAIT
KMP_PRINT_BANNER
KMP_REALLOC
KMP_SET_AFFINITY
KMP_SET_BLOCKTIME
KMP_SET_LIBRARY
KMP_SET_LIBRARY_SERIAL
KMP_SET_LIBRARY_THROUGHPUT
KMP_SET_LIBRARY_TURNAROUND
KMP_SET_PARALLEL_NAME
KMP_SET_STACKSIZE
KMP_SET_STACKSIZE_S
KMP_SET_STATS
KMP_SET_WARNINGS_OFF
KMP_SET_WARNINGS_ON
KMP_SHARABLE_CALLOC
KMP_SHARABLE_FREE
KMP_SHARABLE_MALLOC
KMP_SHARABLE_REALLOC
OMP_DESTROY_LOCK
OMP_DESTROY_NEST_LOCK
OMP_GET_DYNAMIC
OMP_GET_MAX_THREADS
OMP_GET_NESTED
OMP_GET_NUM_PROCS
OMP_GET_NUM_THREADS
OMP_GET_THREAD_NUM
OMP_GET_WTICK
OMP_GET_WTIME
OMP_INIT_LOCK
OMP_INIT_NEST_LOCK
OMP_IN_PARALLEL
OMP_SET_DYNAMIC
OMP_SET_LOCK
OMP_SET_NESTED
OMP_SET_NEST_LOCK
OMP_SET_NUM_THREADS
OMP_TEST_LOCK
OMP_TEST_NEST_LOCK
OMP_UNSET_LOCK
OMP_UNSET_NEST_LOCK
VT_getthid
__kmp_acquire_bootstrap_lock
__kmp_acquire_lock
__kmp_debugging
__kmp_dispatch_dxo_4
__kmp_dispatch_dxo_8
__kmp_fork_call
__kmp_get_reduce_method
__kmp_invoke_microtask
__kmp_launch_monitor
__kmp_launch_worker
__kmp_omp_debug_struct_info
__kmp_omp_library
__kmp_ompd_major_version
__kmp_ompd_minor_version
__kmp_reap_monitor
__kmp_reap_worker
__kmp_release
__kmp_release_bootstrap_lock
__kmp_release_lock
__kmp_test_lock
__kmp_wait_sleep
__kmp_wait_yield_4
__kmp_wait_yield_8
__kmpc_atomic_4
__kmpc_atomic_8
__kmpc_atomic_fixed4_add
__kmpc_atomic_fixed8_add
__kmpc_atomic_float4_add
__kmpc_atomic_float8_add
__kmpc_barrier
__kmpc_barrier_master
__kmpc_barrier_master_nowait
__kmpc_begin
__kmpc_bound_num_threads
__kmpc_bound_thread_num
__kmpc_copyprivate
__kmpc_critical
__kmpc_destroy_lock
__kmpc_destroy_nest_lock
__kmpc_dispatch_fini_4
__kmpc_dispatch_fini_8
__kmpc_dispatch_init_4
__kmpc_dispatch_init_8
__kmpc_dispatch_next_4
__kmpc_dispatch_next_8
__kmpc_end
__kmpc_end_barrier_master
__kmpc_end_critical
__kmpc_end_master
__kmpc_end_ordered
__kmpc_end_reduce
__kmpc_end_reduce_nowait
__kmpc_end_serialized_parallel
__kmpc_end_single
__kmpc_end_taskq
__kmpc_end_taskq_task
__kmpc_flush
__kmpc_for_static_fini
__kmpc_for_static_init_4
__kmpc_for_static_init_8
__kmpc_fork_call
__kmpc_global_num_threads
__kmpc_global_thread_num
__kmpc_in_parallel
__kmpc_in_ssp
__kmpc_init_lock
__kmpc_init_nest_lock
__kmpc_invoke_task_func
__kmpc_master
__kmpc_ok_to_fork
__kmpc_ordered
__kmpc_pop_num_threads
__kmpc_push_num_threads
__kmpc_reduce
__kmpc_reduce_nowait
__kmpc_serialized_parallel
__kmpc_set_lock
__kmpc_set_nest_lock
__kmpc_single
__kmpc_ssp_begin
__kmpc_ssp_distance_4
__kmpc_ssp_distance_8
__kmpc_ssp_end
__kmpc_ssp_fork
__kmpc_ssp_get_max_threads
__kmpc_ssp_init_thread
__kmpc_ssp_num_threads
__kmpc_ssp_post_4
__kmpc_ssp_post_8
__kmpc_ssp_set_event
__kmpc_ssp_set_max_threads
__kmpc_ssp_thread_num
__kmpc_ssp_wait_4
__kmpc_ssp_wait_8
__kmpc_task
__kmpc_task_buffer
__kmpc_taskq
__kmpc_taskq_task
__kmpc_test_lock
__kmpc_test_nest_lock
__kmpc_threadprivate
__kmpc_threadprivate_cached
__kmpc_threadprivate_register
__kmpc_threadprivate_register_vec
__kmpc_unset_lock
__kmpc_unset_nest_lock
kmp_aligned_sharable_malloc
kmp_calloc
kmp_deferred_atomic_add_i4
kmp_deferred_atomic_add_i8
kmp_deferred_atomic_add_r4
kmp_deferred_atomic_add_r8
kmp_free
kmp_get_blocktime
kmp_get_library
kmp_get_num_known_threads
kmp_get_stacksize
kmp_get_stacksize_s
kmp_lock_cond_broadcast
kmp_lock_cond_signal
kmp_lock_cond_wait
kmp_malloc
kmp_nest_lock_cond_broadcast
kmp_nest_lock_cond_signal
kmp_nest_lock_cond_wait
kmp_print_banner
kmp_realloc
kmp_set_affinity
kmp_set_blocktime
kmp_set_library
kmp_set_library_serial
kmp_set_library_throughput
kmp_set_library_turnaround
kmp_set_parallel_name
kmp_set_stacksize
kmp_set_stacksize_s
kmp_set_stats
kmp_set_warnings_off
kmp_set_warnings_on
kmp_sharable_calloc
kmp_sharable_free
kmp_sharable_malloc
kmp_sharable_realloc
kmpc_aligned_sharable_malloc
kmpc_calloc
kmpc_free
kmpc_get_banner
kmpc_get_poolmode
kmpc_get_poolsize
kmpc_get_poolstat
kmpc_malloc
kmpc_poolprint
kmpc_print_banner
kmpc_realloc
kmpc_set_affinity
kmpc_set_blocktime
kmpc_set_library
kmpc_set_parallel_name
kmpc_set_poolmode
kmpc_set_poolsize
kmpc_set_stacksize
kmpc_set_stacksize_s
kmpc_set_stats
kmpc_sharable_calloc
kmpc_sharable_free
kmpc_sharable_malloc
kmpc_sharable_realloc
omp_destroy_lock
omp_destroy_nest_lock
omp_get_dynamic
omp_get_max_threads
omp_get_nested
omp_get_num_procs
omp_get_num_threads
omp_get_thread_num
omp_get_wtick
omp_get_wtime
omp_in_parallel
omp_init_lock
omp_init_nest_lock
omp_set_dynamic
omp_set_lock
omp_set_nest_lock
omp_set_nested
omp_set_num_threads
omp_test_lock
omp_test_nest_lock
omp_unset_lock
omp_unset_nest_lock
ompc_set_dynamic
ompc_set_nested
ompc_set_num_threads
vtgthid

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e8e048d1ce73d59a8c467b770452b41f

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 128KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 8KB - Virtual size: 28KB

.data1 Size: 16KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 1016B

.reloc Size: 12KB - Virtual size: 9KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 132KB - Virtual size: 128KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 8KB - Virtual size: 28KB

.data1
Size: 16KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 1016B

.reloc
Size: 12KB - Virtual size: 9KB

.text
Size: 112KB - Virtual size: 112KB