d44252635577a73949d422e8581342c7edfb9f209b8cdc01052846b5984b44f3

General

Target

d44252635577a73949d422e8581342c7edfb9f209b8cdc01052846b5984b44f3
Size

65KB
MD5

0c945a564244d05f9794ab3e3b3c2ab0
SHA1

09471415c6b0a70641600eb5368ece6f44da9e22
SHA256

d44252635577a73949d422e8581342c7edfb9f209b8cdc01052846b5984b44f3
SHA512

638834da79f0a5f8c6d9c2313f34e2c3bf910aad8b65554930e635570fc40ae77caebc0e31b7655046163533368fc063c4bf95041a9e0d35ea4ea33544b68a7f
SSDEEP

1536:h5e4pLMXthiHZbE1bRWyYyeWc1DqtJhon7Ftbk:h5jlYQNEp0yhiAgFtbk

Score

N/A

Malware Config

Signatures

Files

d44252635577a73949d422e8581342c7edfb9f209b8cdc01052846b5984b44f3
.dll windows x86

426a666805a9a2ae4afc0f948bfa68c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rmcomm

?GetRet@RMclientDS@@QAEHPAURM_HDR@@HPAK@Z
?SendCmd@RMclientDS@@QAEHPAEH@Z
?SendCmd@RMclientDS@@QAEHEEE@Z
?GetRsp@RMclientDS@@QAEPAURM_HDR@@EEPAHK0@Z

pcacmndg

_DspErr@20

kernel32

GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess
LoadLibraryA
DisableThreadLibraryCalls
WideCharToMultiByte
lstrcpyA
lstrlenA
lstrlenW
MultiByteToWideChar
FreeLibrary
GetProcAddress

user32

LoadStringA

oleaut32

SysFreeString
SysStringLen
SysReAllocString

msvcr70

_onexit
__dllonexit
_except_handler3
_adjust_fdiv
malloc
_initterm
__security_error_handler
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
free
calloc

Exports

Exports

InitClient

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

426a666805a9a2ae4afc0f948bfa68c4

Headers

File Characteristics

Imports

rmcomm

pcacmndg

kernel32

user32

oleaut32

msvcr70

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 216B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 464B

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 216B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 464B

.rmnet
Size: 56KB - Virtual size: 60KB