940908d7afe3df3964cc3cb7f3561e145d9438ac3f44f7a104917a7eea3cc89a

Sharing

Copy URL Twitter E-mail

General

Target

940908d7afe3df3964cc3cb7f3561e145d9438ac3f44f7a104917a7eea3cc89a
Size

33KB
MD5

07ab17c1beaddc67b39444da359a7b32
SHA1

4f9e9de7a412d6c222362af3d57173750d85fcd0
SHA256

940908d7afe3df3964cc3cb7f3561e145d9438ac3f44f7a104917a7eea3cc89a
SHA512

51b99fa89ee4c8c9ef6a1559151ea3fc326776ce9d4de9856a99ece481bd301560b48c95a89831674cb461e5a7a2b200525011c43818ac8ffe63ae03468668d8
SSDEEP

384:x/e+QRR8llGD7vUouCaNeuH9Gf0XFOvk+VH7Zqca2bZ6qgL52LbLLMKEWs8OcWYC:RMglGMoZa0iFOJ3zgN2PH5O

Score

N/A

Malware Config

Signatures

Files

940908d7afe3df3964cc3cb7f3561e145d9438ac3f44f7a104917a7eea3cc89a
.dll windows x86

d00f70a9d5ea1034f5563f2fc973ba60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memmove
sprintf
wcslen
isprint

ntdll

RtlAnsiStringToUnicodeString
NtCreateFile
RtlIntegerToUnicodeString
RtlInitUnicodeString
RtlAllocateHeap
RtlInitString
RtlReAllocateHeap
RtlCopyUnicodeString
NtDeviceIoControlFile
RtlNtStatusToDosError
RtlFreeHeap
NtClose
NtWaitForSingleObject
RtlFreeUnicodeString
RtlInitAnsiString
NtOpenFile

kernel32

DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
CreateFileMappingW
UnmapViewOfFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
lstrlenW
InterlockedIncrement
InterlockedDecrement
GetLastError
GetComputerNameA
HeapFree
CloseHandle
MapViewOfFile
GetSystemTimeAsFileTime

advapi32

ReportEventW
RegisterEventSourceA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
DeregisterEventSource
RegQueryValueExW
ReportEventA
RegOpenKeyExW

iphlpapi

GetIcmpStatistics
GetUdpStatistics
GetTcpStatistics
GetIpStatistics
GetNumberOfInterfaces
GetIfTable

Exports

Exports

CloseDhcpPerformanceData
CloseIPXPerformanceData
CloseNWNBPerformanceData
CloseNbfPerformanceData
CloseSPXPerformanceData
CloseTcpIpPerformanceData
CollectDhcpPerformanceData
CollectIPXPerformanceData
CollectNWNBPerformanceData
CollectNbfPerformanceData
CollectSPXPerformanceData
CollectTcpIpPerformanceData
OpenDhcpPerformanceData
OpenIPXPerformanceData
OpenNWNBPerformanceData
OpenNbfPerformanceData
OpenSPXPerformanceData
OpenTcpIpPerformanceData

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d00f70a9d5ea1034f5563f2fc973ba60

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

kernel32

advapi32

iphlpapi

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 16KB

.data Size: 6KB - Virtual size: 6KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 16KB

.data
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 2KB - Virtual size: 1KB