7ad7872ec479d4c0902ea86220678c08abde0d485a468a00d6b64618d4d8bcd3

General

Target

7ad7872ec479d4c0902ea86220678c08abde0d485a468a00d6b64618d4d8bcd3
Size

154KB
MD5

0c5bbf80cbb1c0380b50f69d992c7da6
SHA1

830610971e46c2b165c747f1389d3ec097a286b7
SHA256

7ad7872ec479d4c0902ea86220678c08abde0d485a468a00d6b64618d4d8bcd3
SHA512

901c19874f244a6570f8849e3bec70f4681e819eb99af01c3d7a67f10be355ef817925da4112b844c2284fcfa7df3f3a4b313d2e0ae6086e592b23391bb660a0
SSDEEP

1536:AGwtRxOBJyypgmDjVw5QIRIYaa2WJMfEjtEFY/gJfsg30XB5iDCuW1LWAPi1rj8v:xwtRonyyp+6bKicGvJfB30x5i2F9xUot

Score

N/A

Malware Config

Signatures

Files

7ad7872ec479d4c0902ea86220678c08abde0d485a468a00d6b64618d4d8bcd3
.dll windows x86

41e821890fa19be3977e1353af2f55e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

swprintf
ZwQueryInformationToken
ZwOpenProcessToken
ZwWaitForSingleObject
wcslen
wcschr
LdrFindResource_U
RtlInitUnicodeString
RtlGetCurrentPeb
RtlIpv4AddressToStringA
ZwClose
LdrAccessResource
RtlNtStatusToDosError
memset
ZwQueryVolumeInformationFile
sprintf
LdrAddRefDll
ZwCreateEvent
ZwSetEvent
RtlFreeUnicodeString
ZwReadFile
ZwQueryInformationFile
RtlDosPathNameToNtPathName_U
ZwOpenFile
LdrFindEntryForAddress
ZwWriteFile
RtlPrefixUnicodeString
ZwCreateFile

kernel32

GetSystemTimeAsFileTime
GetLastError
BindIoCompletionCallback
GetSystemDefaultLangID
GetVersion
FreeLibrary
CreateThread
FreeLibraryAndExitThread
GetTickCount
CreateProcessW
LocalFree
LocalAlloc

ws2_32

WSASend
WSARecv
WSAIoctl
bind
closesocket
WSAGetLastError
WSASocketW
WSAStartup

shell32

ShellExecuteExW

advapi32

MD5Final
MD5Update
MD5Init

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 224B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41e821890fa19be3977e1353af2f55e9

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

ws2_32

shell32

advapi32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 224B - Virtual size: 212B

.rsrc Size: 147KB - Virtual size: 147KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 224B - Virtual size: 212B

.rsrc
Size: 147KB - Virtual size: 147KB