832db1e2798078d04957db964b07fe5f68432ec4047fcdad7b16c362e9338e07

Sharing

Copy URL Twitter E-mail

General

Target

832db1e2798078d04957db964b07fe5f68432ec4047fcdad7b16c362e9338e07
Size

1.3MB
MD5

a21059090131aa7fe6ecc516455fbe08
SHA1

18b0319f5226a41ebff358a3196a4b2e994c9ab9
SHA256

832db1e2798078d04957db964b07fe5f68432ec4047fcdad7b16c362e9338e07
SHA512

4fc11ee64a8e86738453e8fa67fa3441cf4571543e928d57328a10b84612c131dcb44362327ae6cc1abaa59e37348574bbd101bf64d19c87008f472543ac77ed
SSDEEP

24576:CTgTI1A8n1fHy66cxcUfAxxIlbA2x+GK2W5hzsc5VTXg7GnrJLL1k7Nk9Ihb:CcI15WrxxI9x+GKx5Wc5VrJnrJ31k7N7

Score

N/A

Malware Config

Signatures

Files

832db1e2798078d04957db964b07fe5f68432ec4047fcdad7b16c362e9338e07
.dll windows x86

255730be3f5f74997961e0a0c251f1ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
SetEndOfFile
SetConsoleCtrlHandler
SetStdHandle
ReadFile
FlushFileBuffers
CreateFileA
OutputDebugStringA
QueryPerformanceFrequency
QueryPerformanceCounter
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
EnterCriticalSection
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
LCMapStringA
GetLastError
LCMapStringW
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
GetTickCount
GetCurrentProcessId
FatalAppExitA
GetTimeZoneInformation
RaiseException
CloseHandle
InterlockedExchange
SetFilePointer
GetLocaleInfoA
GetCPInfo
VirtualProtect
VirtualAlloc
GetSystemInfo
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetACP
GetOEMCP
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr

tier0

?DevMsg@@YAXPBDZZ
_AssertValidWritePtr
GetCPUInformation
Error
DevMsg
Warning
Msg
_AssertValidReadPtr
g_pMemAlloc
CommandLine_Tier0
?Lock@CThreadMutex@@QBEXXZ
?Lock@CThreadMutex@@QAEXXZ
AssertValidStringPtr

vstdlib

GetCVarIF

Exports

Exports

CreateInterface

Sections

.text
Size: 956KB - Virtual size: 952KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

255730be3f5f74997961e0a0c251f1ea

Headers

File Characteristics

Imports

kernel32

tier0

vstdlib

Exports

Exports

Sections

.text Size: 956KB - Virtual size: 952KB

.rdata Size: 120KB - Virtual size: 116KB

.data Size: 32KB - Virtual size: 119KB

.reloc Size: 48KB - Virtual size: 46KB

.text Size: 196KB - Virtual size: 196KB

.text
Size: 956KB - Virtual size: 952KB

.rdata
Size: 120KB - Virtual size: 116KB

.data
Size: 32KB - Virtual size: 119KB

.reloc
Size: 48KB - Virtual size: 46KB

.text
Size: 196KB - Virtual size: 196KB