34503d32409de69ec4979d14b6e4fc9f4ccce606595a069a73b2814ccb5b7da6

Sharing

Copy URL

Twitter E-mail

General

Target

34503d32409de69ec4979d14b6e4fc9f4ccce606595a069a73b2814ccb5b7da6
Size

94KB
MD5

062450ddea99355576af3ba6512dd916
SHA1

ff3da2c76be076db8c08582c9b6b1c3b6171eed1
SHA256

34503d32409de69ec4979d14b6e4fc9f4ccce606595a069a73b2814ccb5b7da6
SHA512

b2fda3b5b06b65c2e1d864e51d7df1dfa93fac58cb68402e269a271be20007d4dc2c1b74a52639ca442a258b86a2fbe03fafac0f54e3880ffeb2d5c53ec494d1
SSDEEP

1536:JARdDVNgsBmRU3zYdz76h4Nx9OgzXMmpC89+pU+/TM6e23FMQ2FjUmc0uJx:YdDVWsBmRU3zYdJ/9OgrM+9+1rMK3kF0

Score

N/A

Malware Config

Signatures

Files

34503d32409de69ec4979d14b6e4fc9f4ccce606595a069a73b2814ccb5b7da6
.dll windows x86

781ab565660282a0d527207046dc7f4c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

mbstowcs
_vsnwprintf
wcstombs
wcslen
_except_handler3
free
malloc
_vsnprintf
_adjust_fdiv
_initterm

ntdll

DbgPrompt
DbgPrint
RtlNtStatusToDosError
NtSetIoCompletion
DbgBreakPoint

advapi32

RegEnumKeyExW
RegisterEventSourceW
ReportEventW
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExA
RegQueryValueExA
RegNotifyChangeKeyValue
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyW

kernel32

WaitForMultipleObjects
DisableThreadLibraryCalls
ReadConsoleInputA
GlobalAlloc
FreeLibrary
CreateThread
GetTickCount
HeapReAlloc
HeapDestroy
ReleaseSemaphore
CreateIoCompletionPort
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FreeLibraryAndExitThread
CreateFileA
SetEvent
CloseHandle
GetCurrentThreadId
GetLocalTime
HeapFree
GetProcessHeap
HeapAlloc
InterlockedExchange
TerminateProcess
GetCurrentProcess
ExitThread
lstrlenA
GetLastError
ExpandEnvironmentStringsA
lstrcmpA
SetConsoleScreenBufferSize
CreateConsoleScreenBuffer
GetStdHandle
AllocConsole
FreeConsole
SetFilePointer
CreateDirectoryA
DeleteFileA
MoveFileExA
WriteConsoleA
WriteFile
GetFileSize
lstrlenW
ExpandEnvironmentStringsW
lstrcmpW
CreateFileW
CreateDirectoryW
DeleteFileW
MoveFileExW
WriteConsoleW
SetConsoleTitleA
CreateEventA
CreateEventW
FormatMessageA
Sleep
LoadLibraryA
InterlockedCompareExchange
MultiByteToWideChar
LocalFree
FormatMessageW
LoadLibraryW
GetModuleFileNameA
WaitForSingleObject
SetConsoleWindowInfo
GetConsoleScreenBufferInfo
SetConsoleActiveScreenBuffer
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
GlobalFree

Exports

Exports

LogErrorA
LogErrorW
LogEventA
LogEventW
MprSetupProtocolEnum
MprSetupProtocolFree
QueueWorkItem
RouterAssert
RouterGetErrorStringA
RouterGetErrorStringW
RouterLogDeregisterA
RouterLogDeregisterW
RouterLogEventA
RouterLogEventDataA
RouterLogEventDataW
RouterLogEventExA
RouterLogEventExW
RouterLogEventStringA
RouterLogEventStringW
RouterLogEventValistExA
RouterLogEventValistExW
RouterLogEventW
RouterLogRegisterA
RouterLogRegisterW
SetIoCompletionProc
TraceDeregisterA
TraceDeregisterExA
TraceDeregisterExW
TraceDeregisterW
TraceDumpExA
TraceDumpExW
TraceGetConsoleA
TraceGetConsoleW
TracePrintfA
TracePrintfExA
TracePrintfExW
TracePrintfW
TracePutsExA
TracePutsExW
TraceRegisterExA
TraceRegisterExW
TraceVprintfExA
TraceVprintfExW

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

781ab565660282a0d527207046dc7f4c

Headers

File Characteristics

Imports

msvcrt

ntdll

advapi32

kernel32

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 29KB

.data Size: 60KB - Virtual size: 61KB

.rsrc Size: 1024B - Virtual size: 1008B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 30KB - Virtual size: 29KB

.data
Size: 60KB - Virtual size: 61KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 1KB - Virtual size: 1KB