2e33c2575940c6e903c5f0ba0599ec0f07c42f4661420afc53f931ee80531021

Sharing

Copy URL

Twitter E-mail

General

Target

2e33c2575940c6e903c5f0ba0599ec0f07c42f4661420afc53f931ee80531021
Size

153KB
MD5

8246df7a7ae10d80dff85f1d010caf60
SHA1

7be0fb35d30357d6c41e45d06539a486c3e77050
SHA256

2e33c2575940c6e903c5f0ba0599ec0f07c42f4661420afc53f931ee80531021
SHA512

20aa59a99a3f431f55f202bcfd0d2c37c27026a1617279a1cb196f1b4fb1c96d308204482de666809e250e85b66ced8d002305a08732c942fe277752caae5aff
SSDEEP

3072:9DAQW6ZaxfREE5o1b2ZU6Tp0HTYyTvRmIew:9RZaxfYQW0lyzw

Score

N/A

Malware Config

Signatures

Files

2e33c2575940c6e903c5f0ba0599ec0f07c42f4661420afc53f931ee80531021
.dll windows x86

e9da348bab9a2954cbb366b16f779829

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
SystemTimeToFileTime
FileTimeToSystemTime
GetLocalTime
GetTickCount
CreateThread
FindFirstFileA
GetFileAttributesExA
DeleteFileA
FileTimeToLocalFileTime
FindNextFileA
GetProcessHeap
SetEndOfFile
ReadFile
LoadLibraryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
GetLastError
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
CloseHandle
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
MultiByteToWideChar
LCMapStringW
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
HeapSize
CreateFileA
InitializeCriticalSectionAndSpinCount
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

utility

CreateFtpObj
GetThisProgramInfoObj

ws2_32

socket
WSAStartup
htons
inet_addr
sendto
WSACleanup

shlwapi

PathFileExistsA

Exports

Exports

GetLogMgrObj

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e9da348bab9a2954cbb366b16f779829

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

utility

ws2_32

shlwapi

Exports

Exports

Sections

.text Size: 70KB - Virtual size: 69KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 6KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 70KB - Virtual size: 69KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 6KB

.rmnet
Size: 56KB - Virtual size: 60KB