ff894023f6a86793e6e913943c8c191eb5b2324bde0f39ff8142189f59741728

Sharing

Copy URL Twitter E-mail

General

Target

ff894023f6a86793e6e913943c8c191eb5b2324bde0f39ff8142189f59741728
Size

188KB
MD5

050c0ca76d60fe48a808cd28e4c90bc0
SHA1

90a3cab7ba8413bb09cb3b42f4322a9960cc27ff
SHA256

ff894023f6a86793e6e913943c8c191eb5b2324bde0f39ff8142189f59741728
SHA512

ac6a21ceadec4770ccadd18b19df278a4d39e89b8612729f539f142bb5912b056ff37bb730a328b34c916f02aba076d59f8006f9b4c30da99a1f1305eb953e19
SSDEEP

3072:p14WVWHm3qP9aUF3OeBGSViGUGXTX6EcwU4wjybIvtTBfbfwVCkQiQD2+MFYcaE+:p14WVWHm07F3OeBpiGUGXLZc54uWIvtX

Score

N/A

Malware Config

Signatures

Files

ff894023f6a86793e6e913943c8c191eb5b2324bde0f39ff8142189f59741728
.dll windows x86

1ae7f52326d3b74a27c897f0b1c87366

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp71

??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Nomemory@std@@YAXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

kernel32

GetModuleFileNameA
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetLastError
SetFilePointer
GetCurrentProcessId
GetFullPathNameA
FindNextFileA
FindFirstFileA
WriteFile
SetFileAttributesA
CopyFileA
GetFileAttributesA
CreateFileA
GetFileSize
ReadFile
CloseHandle
DebugBreak
MultiByteToWideChar
FindFirstFileW
FindClose
LoadLibraryA
GetPrivateProfileStringA
GetProcAddress
GetModuleHandleA
GetSystemTimeAsFileTime
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersionExA

msvcr71

??3@YAXPAX@Z
_vsnprintf
memset
_except_handler3
strcpy
strlen
strrchr
strchr
free
strncpy
strncat
??0exception@@QAE@ABV0@@Z
_CxxThrowException
strncmp
_mkdir
_access
_assert
memmove
_purecall
_msize
malloc
realloc
remove
_rmdir
memcpy
_snprintf
_stricmp
_callnewh
_initterm
_adjust_fdiv
__CppXcptFilter
??1type_info@@UAE@XZ
__dllonexit
_onexit
__security_error_handler
?terminate@@YAXXZ
__CxxFrameHandler
??0exception@@QAE@XZ
??1exception@@UAE@XZ

Exports

Exports

CreateComponent
GetComponentIDs
SetDLLRegistry
SetFactoryHandle
TenioDllCanUnloadNow
TenioDllFreeMap
TenioSetDllSafe

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1ae7f52326d3b74a27c897f0b1c87366

Headers

File Characteristics

Imports

msvcp71

kernel32

msvcr71

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 1024B - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 744B

.reloc Size: 7KB - Virtual size: 7KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 1024B - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 744B

.reloc
Size: 7KB - Virtual size: 7KB

.rmnet
Size: 56KB - Virtual size: 60KB