37da2909053c76abde96dda0c79cc358ac5f9f3480ea12346a20e8d6b86ba066

Sharing

Copy URL Twitter E-mail

General

Target

37da2909053c76abde96dda0c79cc358ac5f9f3480ea12346a20e8d6b86ba066
Size

316KB
MD5

a1b618ae0799e4f0e6cdc982e9f08970
SHA1

30309638de806c8a337ba60e237f33d203304e84
SHA256

37da2909053c76abde96dda0c79cc358ac5f9f3480ea12346a20e8d6b86ba066
SHA512

5342dc983460b45494833a15b106864f2bd9837ce92005530b461b34e99919aed75cb5f51f811ff7ab0a31a371108a2ad873cf72b3fb4d782c39b8a5195153b9
SSDEEP

6144:IAcSWytEQTnpDfet04woSHAQr4CGFtnPsz:IAWytEiDfetXRsAObGrsz

Score

N/A

Malware Config

Signatures

Files

37da2909053c76abde96dda0c79cc358ac5f9f3480ea12346a20e8d6b86ba066
.exe windows x86

4663161c16045c45538818c4601dd0d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReleaseMutex
ReadFile
Sleep
WriteFile
WaitForSingleObject
SetFilePointer
CreateFileA
ExitProcess
SetConsoleCtrlHandler
GetConsoleScreenBufferInfo
GetStdHandle
SetConsoleTextAttribute
OpenMutexA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
GetProcAddress
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetCommandLineA
HeapFree
HeapAlloc
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetLocaleInfoA
RaiseException
GetStringTypeA
GetStringTypeW
GetModuleHandleA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

commonlib

NTCI_SendPacket
NTCI_GetCapabilities
NTCI_GetPartSensors
NTCI_CreatePacketFeed
NTCI_DestroyPacketFeed
NTCI_ReadRegister32
NTCI_PacketClassification
NTCI_GetNextBuffer
NTCI_StartPacketFeed
NTCI_GetChannelStatus
NTCI_StopPacketFeed
NTCI_GetPartSensorsBlockSize
NTCI_CloseCard
NTCI_ReleaseBuffer
NTCI_GetPacketFeedBuffers
NTCI_WriteRegister32
NTCI_OpenCard
NTCI_ExplainLastCardError
NTCI_ReadVitalProductData
NTCI_FlushTxPorts
NTCI_GetPacketFeedCount
NTCI_GetPacketFeedDescription
NTCI_GetCardConfigurationDetails
NTCI_SetupPacketFeedEngine

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cfhyfwm
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 186KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4663161c16045c45538818c4601dd0d8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

commonlib

Sections

.text Size: 71KB - Virtual size: 71KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 7KB - Virtual size: 79KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 33KB - Virtual size: 34KB

cfhyfwm Size: - Virtual size: 4KB

.text Size: 186KB - Virtual size: 188KB

.text
Size: 71KB - Virtual size: 71KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 7KB - Virtual size: 79KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 33KB - Virtual size: 34KB

cfhyfwm
Size: - Virtual size: 4KB

.text
Size: 186KB - Virtual size: 188KB