3dd1cff699ccad6c860884383c6b6bc4c13e4257659b068049d7113eb870b791

Sharing

Copy URL

Twitter E-mail

General

Target

3dd1cff699ccad6c860884383c6b6bc4c13e4257659b068049d7113eb870b791
Size

188KB
MD5

0e7975fa6ce5a0ef61701dbcf3829740
SHA1

b37130ca7aa0d49ee77f0c648fc931ac209b37ee
SHA256

3dd1cff699ccad6c860884383c6b6bc4c13e4257659b068049d7113eb870b791
SHA512

bb8c2fcad4e4d8621a03193607cca0a8172fe356ac461e31eaf55d0753cc392ee6601c6632b32bd14cc5621fa0f3f610d5bc41e8bdb2a1776ff4cb41f93367cc
SSDEEP

3072:oUsmqmSZebY/mTDP5ydVR+olBpbnuY8DdLellmtZUS3Nm7eD8JtHoHz:S5QkmcdVjpbnlASCZ47eatE

Score

N/A

Malware Config

Signatures

Files

3dd1cff699ccad6c860884383c6b6bc4c13e4257659b068049d7113eb870b791
.dll windows x86

f2e403ac278b5e58c6ac7181c0b6f65e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeKillEvent
timeSetEvent

kernel32

GetEnvironmentStrings
GetLocalTime
CloseHandle
WriteFile
CreateFileA
ReadFile
GetTickCount
Sleep
SystemTimeToFileTime
FileTimeToSystemTime
GetProcAddress
LoadLibraryA
lstrcpyA
GetLastError
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Exports

Exports

NoxClose
NoxFind
NoxGenRequestFile
NoxGetExpiryDateTime
NoxGetLastError
NoxGetRemnantCount
NoxGetUID
NoxOpen
NoxReadMem
NoxReadStorage
NoxUnlock
NoxWriteMem

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f2e403ac278b5e58c6ac7181c0b6f65e

Headers

File Characteristics

Imports

winmm

kernel32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 36KB - Virtual size: 58KB

.rsrc Size: 4KB - Virtual size: 896B

.reloc Size: 8KB - Virtual size: 4KB

.rmnet Size: 88KB - Virtual size: 88KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 36KB - Virtual size: 58KB

.rsrc
Size: 4KB - Virtual size: 896B

.reloc
Size: 8KB - Virtual size: 4KB

.rmnet
Size: 88KB - Virtual size: 88KB