4fec52f7721fe251619ba73b312ba1c3c1a521f68341e2f5586f26d7e74fe9e7

General

Target

4fec52f7721fe251619ba73b312ba1c3c1a521f68341e2f5586f26d7e74fe9e7
Size

152KB
MD5

0b1723cd35497b046ee51b8bdf8605a4
SHA1

532a8f00d333a0f469d4eab52b2138da68d23655
SHA256

4fec52f7721fe251619ba73b312ba1c3c1a521f68341e2f5586f26d7e74fe9e7
SHA512

5f9ab4e870c5cf5b58a87776aa65a154692cbae92a9137a828ca50ba50b89ea930742978ff92c99d61eca7cb0e89d24cc14082e28dde18847a12b8d89b3c4da2
SSDEEP

3072:/tdYxjyJDnd3wUccmRBNduUZAiiy9zjUILZqcShBI:kxuD3wUccoju1M5AIFSk

Score

N/A

Malware Config

Signatures

Files

4fec52f7721fe251619ba73b312ba1c3c1a521f68341e2f5586f26d7e74fe9e7
.dll windows x86

504cc3f55c6bfb05c8c6cea11aba4900

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
Sleep
SetEvent
CreateEventA
WaitForMultipleObjects
CreateMutexA
WaitForSingleObject
ReleaseMutex
TerminateThread
CreateThread
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess

msvcp71

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?_Nomemory@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

msvcr71

??0exception@@QAE@ABV0@@Z
_CxxThrowException
memmove
sprintf
strncpy
malloc
_callnewh
??1type_info@@UAE@XZ
__security_error_handler
_except_handler3
free
_initterm
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
__dllonexit
_onexit
__RTDynamicCast
_purecall
??3@YAXPAX@Z
__CxxFrameHandler
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_stricmp

Exports

Exports

CreatePlugin

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

504cc3f55c6bfb05c8c6cea11aba4900

Headers

File Characteristics

Imports

kernel32

msvcp71

msvcr71

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 9KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 492B

.reloc Size: 4KB - Virtual size: 2KB

.text Size: 120KB - Virtual size: 120KB

.text
Size: 12KB - Virtual size: 9KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 492B

.reloc
Size: 4KB - Virtual size: 2KB

.text
Size: 120KB - Virtual size: 120KB