f7bd1cfbd766fae961fedb84a14ac5a044c4a168b585733c65fad4980c7ab073

Sharing

Copy URL Twitter E-mail

General

Target

f7bd1cfbd766fae961fedb84a14ac5a044c4a168b585733c65fad4980c7ab073
Size

92KB
MD5

920502de3c2d55d8a6ae68d4872d09ed
SHA1

b45c085f7021e5d7badc0760aacaf8bd91fbfea8
SHA256

f7bd1cfbd766fae961fedb84a14ac5a044c4a168b585733c65fad4980c7ab073
SHA512

661c5e9769ac63feba79f9f23aaf8a248a93d62e6745edae5178c433a0aec3f0b3c6107393414035e2c1056bf908ad4be98f391f3adb2bc15b45590789cf570e
SSDEEP

1536:GMnqboN2r2iNPalpCoRYc/Povg16IZyoJKl7ILI7G:GMnqboIp0lr4vg1zKcL

Score

N/A

Malware Config

Signatures

Files

f7bd1cfbd766fae961fedb84a14ac5a044c4a168b585733c65fad4980c7ab073
.dll windows x86

2c1a483c3c1dcf0d77e30bec401a94b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetLastError
TlsSetValue
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
TlsFree
CreateMutexA
CloseHandle
ReleaseMutex
WaitForSingleObject
GetSystemDirectoryA
LoadLibraryA
FormatMessageA
GetProcAddress
FreeLibrary

msvcrt

_vsnprintf
sprintf
strlen
strerror
strncpy
strcpy
_strdup
malloc
_errno
_assert
abort
free
strchr
strcmp
strtoul
strcat
realloc
calloc
_stat

ws2_32

gethostbyname
gethostbyaddr
getservbyport
ntohs
inet_addr
htons
getservbyname
htonl
inet_ntoa
WSASetLastError
WSAGetLastError

Exports

Exports

krb5int_clear_error
krb5int_close_plugin
krb5int_close_plugin_dirs
krb5int_free_error
krb5int_free_plugin_dir_data
krb5int_free_plugin_dir_func
krb5int_freeaddrinfo
krb5int_gai_strerror
krb5int_get_error
krb5int_get_plugin_data
krb5int_get_plugin_dir_data
krb5int_get_plugin_dir_func
krb5int_get_plugin_func
krb5int_getaddrinfo
krb5int_getnameinfo
krb5int_getspecific
krb5int_gmt_mktime
krb5int_in6addr_any
krb5int_key_delete
krb5int_key_register
krb5int_mutex_alloc
krb5int_mutex_free
krb5int_mutex_lock
krb5int_mutex_lock_update_stats
krb5int_mutex_report_stats
krb5int_mutex_unlock
krb5int_mutex_unlock_update_stats
krb5int_open_plugin
krb5int_open_plugin_dirs
krb5int_pthread_loaded
krb5int_set_error
krb5int_set_error_info_callout_fn
krb5int_setspecific
krb5int_vset_error

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2c1a483c3c1dcf0d77e30bec401a94b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 992B

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 992B

.rmnet
Size: 60KB - Virtual size: 60KB