d1600a34e84c4a0e9dd95215c022f04060d71dc771b9afd6b80bb26541e16890

Sharing

Copy URL Twitter E-mail

General

Target

d1600a34e84c4a0e9dd95215c022f04060d71dc771b9afd6b80bb26541e16890
Size

292KB
MD5

90a1076f489366b6fc763f41ca9c62f1
SHA1

322ef503dbd94e82b0d2dc17bce930ddc6ba45cf
SHA256

d1600a34e84c4a0e9dd95215c022f04060d71dc771b9afd6b80bb26541e16890
SHA512

b81b9e34e647ec30699852954898c7e4262904b64673ac9e067848b73f620b3296afd34e89a935f277b623568fb4ba341b0c89f8fc7d8f863762a24d604db412
SSDEEP

6144:1/Pk3cALDNKBOhwmk1F5QdzzjFk7nAjNZwfN+zeli61u:1/PkLMOe6RzHRZwfce5

Score

N/A

Malware Config

Signatures

Files

d1600a34e84c4a0e9dd95215c022f04060d71dc771b9afd6b80bb26541e16890
.dll windows x86

ffaa4bd69d277589b262764679abcff7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
LCMapStringW
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetEndOfFile
GetFileSize
Sleep
CreateMutexA
GetVersionExW
GetCurrentProcessId
GetCurrentThreadId
GetFileType
LoadLibraryA
GetProcAddress
GetFileAttributesA
GetFileAttributesW
DeleteFileA
DeleteFileW
CreateFileA
CreateFileW
HeapAlloc
HeapFree
GetACP
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetLocaleInfoA
RtlUnwind
InitializeCriticalSection
InterlockedExchange
QueryPerformanceCounter
GetTickCount
HeapSize

Exports

Exports

_DrvAddBinVardataItem
_DrvAddKey
_DrvAddVardataItem
_DrvAllocKey
_DrvAppendRecord
_DrvBottomIndex
_DrvBuildKey
_DrvCalcOffsets
_DrvCloseDbTable
_DrvCloseIndex
_DrvCloseOldestFile
_DrvCloseVardata
_DrvConvertToDouble
_DrvCreateDbTable
_DrvCreateIndex
_DrvCreateVardata
_DrvCurrentKey
_DrvDeleteKey
_DrvDeleteRecord
_DrvFindRecord
_DrvFlushDbTable
_DrvFlushIndex
_DrvFreeKey
_DrvFreeMemTable
_DrvIndexRecord
_DrvNextKey
_DrvOpenDbTable
_DrvOpenIndex
_DrvOpenVardata
_DrvPackTable
_DrvPreviousKey
_DrvQueryBinVardataSize
_DrvQueryCapability
_DrvQueryExtensions
_DrvQueryIndexFile
_DrvQueryTableFile
_DrvQueryTableSize
_DrvQueryVardataSize
_DrvReadRecord
_DrvRecallRecord
_DrvRemoveVardataItem
_DrvRetrieveBinVardataItem
_DrvRetrieveVardataItem
_DrvStreamClose
_DrvStreamCreate
_DrvStreamOpen
_DrvStreamRead
_DrvStreamReadText
_DrvStreamSeek
_DrvStreamStats
_DrvStreamTell
_DrvStreamWrite
_DrvStreamWriteText
_DrvTopIndex
_DrvUnindexRecord
_DrvVersion
_DrvWidestTableColumn
_DrvWriteBinVardataItem
_DrvWriteRecord
_DrvWriteVardataItem

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffaa4bd69d277589b262764679abcff7

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 82KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 180KB - Virtual size: 180KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 84KB - Virtual size: 82KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 180KB - Virtual size: 180KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 5KB