7e200cc734a82210de006352bd826b9a9cf46411a41f049cc31b7fc1b885ec7b

Sharing

Copy URL Twitter E-mail

General

Target

7e200cc734a82210de006352bd826b9a9cf46411a41f049cc31b7fc1b885ec7b
Size

120KB
MD5

0d4fe0982ebb36b5275dd68f5c4e17fe
SHA1

79592d073ef1ec885c4e501ccc41f5a5b213ca0d
SHA256

7e200cc734a82210de006352bd826b9a9cf46411a41f049cc31b7fc1b885ec7b
SHA512

be31eb4347205c608064e5f1088aa1369e876cfaed634fa4756c557521d7f8a7bdd1fb0eca90d717c33e750c9a806c32e2c65942061bb95111b43abe4e85345c
SSDEEP

1536:8PEGIoG91DuUat9x4zwFQ8Q94FzEWJ5FyDfbbLVawdu7+R5m/jZDQWNuz86Wwi:wEGIogvaJFkpYCqjZU2e86M

Score

N/A

Malware Config

Signatures

Files

7e200cc734a82210de006352bd826b9a9cf46411a41f049cc31b7fc1b885ec7b
.dll windows x86

d6f1d485207e21c7e9c1c88079bcd268

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
lstrcpyA
lstrlenA
CloseHandle
GetFileSize
CreateFileA
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode

user32

CharNextA
GetSystemMetrics

msvcr71

_except_handler3
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
strchr
printf
strncpy
_stricmp
_vsnprintf
realloc
fwrite
_filelength
fread
ftell
fseek
fclose
fopen
atoi
_splitpath
_strlwr
free
malloc
??_V@YAXPAX@Z
??_U@YAPAXI@Z
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_putenv

msvcp71

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Exports

Exports

RMACreateInstance
RMAShutdown
SetDLLAccessPath

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6f1d485207e21c7e9c1c88079bcd268

Headers

File Characteristics

Imports

kernel32

user32

msvcr71

msvcp71

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 60KB - Virtual size: 57KB

.rsrc Size: 4KB - Virtual size: 912B

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 60KB - Virtual size: 57KB

.rsrc
Size: 4KB - Virtual size: 912B

.reloc
Size: 8KB - Virtual size: 4KB