a2856a281f2085bb9f233f09582d56d44596b63aada66cf87cfe49e2395091bb

General

Target

a2856a281f2085bb9f233f09582d56d44596b63aada66cf87cfe49e2395091bb
Size

504KB
MD5

82a49b777970d36e93e37d036621db40
SHA1

d22daaf9a7e5d44df1a2a673124d56749cfd167a
SHA256

a2856a281f2085bb9f233f09582d56d44596b63aada66cf87cfe49e2395091bb
SHA512

0c545de9d8250cb4ff584392a82adb889ff5f5e441034ce09abbecef5ed3630a65ba8593f82f2ca19fb969c48cc981befe395887df5fc70f0c96da52e5806e68
SSDEEP

12288:AfmQLVNKImHg4WwIoMMPbf5z81rTeab1y0p2IBiBEQYwmb9v5qnEC:AfmQC8O2enX

Score

N/A

Malware Config

Signatures

Files

a2856a281f2085bb9f233f09582d56d44596b63aada66cf87cfe49e2395091bb
.dll windows x86

2c59865c48f0cae91a27e8dce3ceac09

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
FindFirstFileA
FindClose
FindNextFileA
HeapAlloc
HeapReAlloc
RtlUnwind
HeapFree
IsBadReadPtr
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetLastError
CreateDirectoryA
InterlockedDecrement
InterlockedIncrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
RaiseException
CloseHandle
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetFilePointer
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
SetStdHandle
FlushFileBuffers
ReadFile
CreateFileA
GetACP
GetOEMCP
SetEndOfFile
GetLocaleInfoW

Exports

Exports

CreateInterface

Sections

.text
Size: 312KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2c59865c48f0cae91a27e8dce3ceac09

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 312KB - Virtual size: 310KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 32KB - Virtual size: 59KB

.reloc Size: 40KB - Virtual size: 36KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 312KB - Virtual size: 310KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 32KB - Virtual size: 59KB

.reloc
Size: 40KB - Virtual size: 36KB

.rmnet
Size: 60KB - Virtual size: 60KB