0c65709f74c2bf6686cef03e671f1646465cda2545bb3eddd019e7a90e2d3237

General

Target

0c65709f74c2bf6686cef03e671f1646465cda2545bb3eddd019e7a90e2d3237
Size

252KB
MD5

0bfb4afdf7e47c98cefe098184ac1357
SHA1

6cb6d8d37f00de0ef6b8bf0e52e24e69646ce9a9
SHA256

0c65709f74c2bf6686cef03e671f1646465cda2545bb3eddd019e7a90e2d3237
SHA512

31456afb0725de84c6aecaa8428c2ea5484d04acceeeac28d416f081dbdf363ca379c9eadead891b9b0118fc0cc1f46e7bb953afe7ea682518bfc56e5d3f4c60
SSDEEP

3072:GPJRoc3l9nbv7nBrzLmRjM8RBWnzYI/sJ18MHxgIzC4mOFiO5QC6djedc+VOcGcM:YJRochzLw1I/u1tHxgIh5nQCrOOOko/

Score

N/A

Malware Config

Signatures

Files

0c65709f74c2bf6686cef03e671f1646465cda2545bb3eddd019e7a90e2d3237
.dll windows x86

770a25420e56cb2294c0b48da5146723

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
CloseHandle
FlushFileBuffers
SetStdHandle
GetProcAddress
GetModuleHandleA
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LCMapStringA
LCMapStringW
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RtlUnwind
InterlockedExchange
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
GetStringTypeA
GetStringTypeW

tier0

Error
g_pMemAlloc

mss32

_AIL_shutdown@0
_RIB_find_files_provider@20
RIB_request_interface
RIB_free_provider_library
_AIL_set_redist_directory@4
_AIL_startup@0

Exports

Exports

CreateInterface

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

770a25420e56cb2294c0b48da5146723

Headers

File Characteristics

Imports

kernel32

tier0

mss32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 9KB

.reloc Size: 8KB - Virtual size: 4KB

.text Size: 196KB - Virtual size: 196KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 9KB

.reloc
Size: 8KB - Virtual size: 4KB

.text
Size: 196KB - Virtual size: 196KB