850448f7107c1fa7aec6da7c5498206d418ebb23dcacded30c6e45ae220fed33

Sharing

Copy URL Twitter E-mail

General

Target

850448f7107c1fa7aec6da7c5498206d418ebb23dcacded30c6e45ae220fed33
Size

1.3MB
MD5

83b3a169a9748627c6c825c3b78dafe9
SHA1

f6ada15d31848d32b8a9ab39a0673c09179831a9
SHA256

850448f7107c1fa7aec6da7c5498206d418ebb23dcacded30c6e45ae220fed33
SHA512

94df3a902b835c8e0241618834617d109a6d5406e8c3d812ee96fc78c6db459ff4abb463fd381fa81ef27167399ed6477a388eb599f5c66bfc1b116fcead8b49
SSDEEP

24576:CTgTI1A8n1fHy66cxcUfAxxIlbA2x+GK2W5hzsc5VTXg7GnrJLL1k7Nk9IhD:CcI15WrxxI9x+GKx5Wc5VrJnrJ31k7Nj

Score

N/A

Malware Config

Signatures

Files

850448f7107c1fa7aec6da7c5498206d418ebb23dcacded30c6e45ae220fed33
.dll windows x86

255730be3f5f74997961e0a0c251f1ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
SetEndOfFile
SetConsoleCtrlHandler
SetStdHandle
ReadFile
FlushFileBuffers
CreateFileA
OutputDebugStringA
QueryPerformanceFrequency
QueryPerformanceCounter
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
EnterCriticalSection
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
LCMapStringA
GetLastError
LCMapStringW
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
GetTickCount
GetCurrentProcessId
FatalAppExitA
GetTimeZoneInformation
RaiseException
CloseHandle
InterlockedExchange
SetFilePointer
GetLocaleInfoA
GetCPInfo
VirtualProtect
VirtualAlloc
GetSystemInfo
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetACP
GetOEMCP
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr

tier0

?DevMsg@@YAXPBDZZ
_AssertValidWritePtr
GetCPUInformation
Error
DevMsg
Warning
Msg
_AssertValidReadPtr
g_pMemAlloc
CommandLine_Tier0
?Lock@CThreadMutex@@QBEXXZ
?Lock@CThreadMutex@@QAEXXZ
AssertValidStringPtr

vstdlib

GetCVarIF

Exports

Exports

CreateInterface

Sections

.text
Size: 956KB - Virtual size: 952KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

255730be3f5f74997961e0a0c251f1ea

Headers

File Characteristics

Imports

kernel32

tier0

vstdlib

Exports

Exports

Sections

.text Size: 956KB - Virtual size: 952KB

.rdata Size: 120KB - Virtual size: 116KB

.data Size: 32KB - Virtual size: 119KB

.reloc Size: 48KB - Virtual size: 46KB

.text Size: 196KB - Virtual size: 196KB

.text
Size: 956KB - Virtual size: 952KB

.rdata
Size: 120KB - Virtual size: 116KB

.data
Size: 32KB - Virtual size: 119KB

.reloc
Size: 48KB - Virtual size: 46KB

.text
Size: 196KB - Virtual size: 196KB