fd105885e4cf5438cf1b5b93d86af715ffa7618676005b2666f24ee6e23b0c87

Sharing

Copy URL Twitter E-mail

General

Target

fd105885e4cf5438cf1b5b93d86af715ffa7618676005b2666f24ee6e23b0c87
Size

1.2MB
MD5

0efb05fec53639d92f87c0c70ccbd570
SHA1

41c1eddd76d154a34fb17e0d5f0c8c0a3cf3d739
SHA256

fd105885e4cf5438cf1b5b93d86af715ffa7618676005b2666f24ee6e23b0c87
SHA512

64a4a51274afe8cddf9d1e635ff2506c8ef6dbc277769924894a75bb4e4f1b7b96313c19605daff183f40db523979c884998e4dbbfc8da5cb5c9b2afa70d91f2
SSDEEP

24576:lTgTI1A831fHy66cxcUfAxxIlbA2x+GK2W5hzsc5VTXg7GHgJLL1E74Oc:lcI1ZGrxxI9x+GKx5Wc5VrJHgJ31E7

Score

N/A

Malware Config

Signatures

Files

fd105885e4cf5438cf1b5b93d86af715ffa7618676005b2666f24ee6e23b0c87
.dll windows x86

255730be3f5f74997961e0a0c251f1ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
SetEndOfFile
SetConsoleCtrlHandler
SetStdHandle
ReadFile
FlushFileBuffers
CreateFileA
OutputDebugStringA
QueryPerformanceFrequency
QueryPerformanceCounter
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
EnterCriticalSection
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
LCMapStringA
GetLastError
LCMapStringW
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
GetTickCount
GetCurrentProcessId
FatalAppExitA
GetTimeZoneInformation
RaiseException
CloseHandle
InterlockedExchange
SetFilePointer
GetLocaleInfoA
GetCPInfo
VirtualProtect
VirtualAlloc
GetSystemInfo
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetACP
GetOEMCP
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr

tier0

?DevMsg@@YAXPBDZZ
_AssertValidWritePtr
GetCPUInformation
Error
DevMsg
Warning
Msg
_AssertValidReadPtr
g_pMemAlloc
CommandLine_Tier0
?Lock@CThreadMutex@@QBEXXZ
?Lock@CThreadMutex@@QAEXXZ
AssertValidStringPtr

vstdlib

GetCVarIF

Exports

Exports

CreateInterface

Sections

.text
Size: 956KB - Virtual size: 952KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

255730be3f5f74997961e0a0c251f1ea

Headers

File Characteristics

Imports

kernel32

tier0

vstdlib

Exports

Exports

Sections

.text Size: 956KB - Virtual size: 952KB

.rdata Size: 120KB - Virtual size: 116KB

.data Size: 32KB - Virtual size: 119KB

.reloc Size: 48KB - Virtual size: 46KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 956KB - Virtual size: 952KB

.rdata
Size: 120KB - Virtual size: 116KB

.data
Size: 32KB - Virtual size: 119KB

.reloc
Size: 48KB - Virtual size: 46KB

.rmnet
Size: 60KB - Virtual size: 60KB