77987b5a5363826c3b9dfb5d14138d8ff6d046c6e0e2280bcc87b0fe3ce1e8f7

Sharing

Copy URL Twitter E-mail

General

Target

77987b5a5363826c3b9dfb5d14138d8ff6d046c6e0e2280bcc87b0fe3ce1e8f7
Size

217KB
MD5

908ac950bf163fb77e99e7001f747c85
SHA1

644cc34c25df8fd9b2699d006d074032ffe23fe5
SHA256

77987b5a5363826c3b9dfb5d14138d8ff6d046c6e0e2280bcc87b0fe3ce1e8f7
SHA512

5b466c5fdca2bd663e710ab1bd95a385b28e7c4cb28da587a1b6c7a469f9ccf1bc64140f953b18eca1c0885ca5b24a9f1b18b327f0f26bfb04825b87da5a7601
SSDEEP

6144:twP0ny1w2/DED+7FqeCx6OiNRJGdPRNUutqoeo/w:kz/cc8gVRJgRNlK

Score

N/A

Malware Config

Signatures

Files

77987b5a5363826c3b9dfb5d14138d8ff6d046c6e0e2280bcc87b0fe3ce1e8f7
.dll windows x86

96ab4cd113378779339fb06e332b7e2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

supersub

ord65
ord540
ord541
ord137
ord210
ord231

amsvcr

_adjust_fdiv
malloc
memcpy
free
_initterm

user32

LoadStringA

kernel32

lstrlenA
DisableThreadLibraryCalls
GetModuleHandleA

Exports

Exports

AOLCommClose
AOLCommConnect
AOLCommDisconnect
AOLCommFormulateLocality
AOLCommGetCSLList
AOLCommGetCSLListLength
AOLCommGetCSLResult
AOLCommGetCSLResultLength
AOLCommGetCurrentLocality
AOLCommGetDeviceInfo
AOLCommGetDeviceInfoLength
AOLCommGetDevices
AOLCommGetDevicesLength
AOLCommGetLocalities
AOLCommGetLocalitiesLength
AOLCommGetLocality
AOLCommGetLocalityByIndex
AOLCommGetLocalityInfo
AOLCommGetLocalityInfoLength
AOLCommOpen
AOLCommResignon
AOLCommSendMessage
AOLCommSetCurrentLocality
AOLCommSetLocalityInfo
AOLCommSignoff
AOLCommSignon
AOLCommSignonRetry
ClearActiveProtocol
CompressName
DataFromCommTool
DestroyCommParms
DevmanInit
DiceNotifyHandler
EndProtocol
EnumCommDevice
Enum_Comm
ErrorFromCommTool
EscapeFunction
Flush_Comm
GetCommToolTemplate
GetError
GetNextTool
GetProtocolTemplate
InitAOLCommDLL
InitDCB
ProtocolClearSessionFlag
ProtocolDispatchOff
ProtocolDispatchOn
ProtocolGameExit
ProtocolGetSessionFlag
ProtocolInit
ProtocolIsActive
ProtocolPatchInitPkt
ProtocolReceive
ProtocolRestart
ProtocolSend
ProtocolSetSessionFlag
Read_Comm
RegisterCommTool
RegisterProtocol
ResetProtocol
SetActiveProtocol
SetDCB
Setup_Comm
Special_Comm
StartProtocol
UnregisterCommTool
UnregisterProtocol
Write_Comm
_ProtocolErrorCallback@8

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96ab4cd113378779339fb06e332b7e2e

Headers

File Characteristics

Imports

supersub

amsvcr

user32

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 168KB - Virtual size: 168KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 512B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 168KB - Virtual size: 168KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 512B