9ee037c59dd35f2ae0d12088778e1c14dbe7541638d40e20a1fd2cc1c42d3c8f

General

Target

9ee037c59dd35f2ae0d12088778e1c14dbe7541638d40e20a1fd2cc1c42d3c8f
Size

100KB
MD5

47e04a94c6899a04c1e2b2ff984b37a0
SHA1

f42a075bfd514e924a37d360ff2c82a09dd38c52
SHA256

9ee037c59dd35f2ae0d12088778e1c14dbe7541638d40e20a1fd2cc1c42d3c8f
SHA512

a936e4582be3b32f1437c6b94a5b7faa3ad48f6a16c1cc17a07efb8e236b3c2262ff5f4d20e2bc465eda2a55681a80789ea0eb96bc84f6f8b6e7e4fecd56c02a
SSDEEP

1536:8bkqTEwjeZh5ojSW60SSyWX6aNWheLoHnPsUF5LMfD+OVj8Jv5P:72jm5ojSW60y8oHnUUF5LU3j8Jv5P

Score

N/A

Malware Config

Signatures

Files

9ee037c59dd35f2ae0d12088778e1c14dbe7541638d40e20a1fd2cc1c42d3c8f
.dll windows x86

901ed3d28347ad883cc4071eee2d0745

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommState
GetCommState
CloseHandle
SetupComm
CreateFileA
WriteFile
ReadFile
Sleep
SetCommTimeouts
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
RtlUnwind

Exports

Exports

ev_plc_driver_info
ev_plc_init
ev_plc_read
ev_plc_slave_main
ev_plc_write

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

901ed3d28347ad883cc4071eee2d0745

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 9KB

.reloc Size: 4KB - Virtual size: 3KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 9KB

.reloc
Size: 4KB - Virtual size: 3KB

.rmnet
Size: 60KB - Virtual size: 60KB