33f0c9820c44d3b6f9a27f40ed0006ff58a9ed199e6b8a4f00672c3051f8bd96

Sharing

Copy URL Twitter E-mail

General

Target

33f0c9820c44d3b6f9a27f40ed0006ff58a9ed199e6b8a4f00672c3051f8bd96
Size

184KB
MD5

7a4b37ad535098209521e6405c686da0
SHA1

bff10b6b9d9a1b055bfa03b4cdd1474c46c7fc32
SHA256

33f0c9820c44d3b6f9a27f40ed0006ff58a9ed199e6b8a4f00672c3051f8bd96
SHA512

7ab8aae12596a13f91efb34fc0aff559aaa32959fd44a75f457f4bef92d0c65e71d3f95a280cf4bd0b8e341367842980485dcdbf98fd5efe35d828f5039e44d4
SSDEEP

3072:9g61orISz7izakorqfwLB9Mlfh2KjfByu444GJ3kBZCsQ1gSwWGRO+/MKigiyn4P:9kbq0GhbfKMbwo+/tDVXs

Score

N/A

Malware Config

Signatures

Files

33f0c9820c44d3b6f9a27f40ed0006ff58a9ed199e6b8a4f00672c3051f8bd96
.dll windows x86

d384a5ee6e6325b3e480fa141c712c9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

fddmsg

FdDriveMessage

api

I97AddGroupAttrib
I97GetDeviceAttrib
I97StopTesting
I97ReleaseAttrib
I97SetDeviceAttrib
I97GetTestParam
TMILogMsg
I97AppMsg
I97GetTestAttrib
I97AddDeviceAttrib
I97AddTest
I97AddTestAttrib
I97AddTestParam
I97AddGroup
I97GetGroupParam
I97ReleaseParam
I97AddDevice

tlk

AllocStringToLocal
IsI97APIVersionConflict
FreeStrings
AllocBitmap
FreeBitmap

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

GetLastError
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetModuleFileNameA
GetSystemTimeAsFileTime
TlsSetValue
TlsAlloc
TlsFree
Sleep
TlsGetValue
GetCurrentThreadId

msvcr80

_encoded_null
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_malloc_crt
_encode_pointer
memset
malloc
toupper
strncmp
free

Exports

Exports

CloseGroup
GetGroupVersion
InitGroup
RunListOfTests

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d384a5ee6e6325b3e480fa141c712c9f

Headers

File Characteristics

Imports

fddmsg

api

tlk

version

kernel32

msvcr80

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 2KB - Virtual size: 1KB

.text Size: 148KB - Virtual size: 148KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 148KB - Virtual size: 148KB