e7d13b32fbd28b57686ad7a07b3655db40c04c337eb95140f3eac9adfffa7f66

Sharing

Copy URL Twitter E-mail

General

Target

e7d13b32fbd28b57686ad7a07b3655db40c04c337eb95140f3eac9adfffa7f66
Size

388KB
MD5

21b41c8293b3ca1282556be3ceb1f3d0
SHA1

bdc587504b354f1650a398e8f8189e53dec148ff
SHA256

e7d13b32fbd28b57686ad7a07b3655db40c04c337eb95140f3eac9adfffa7f66
SHA512

fa153c396bdf486f887807d4e88e2ca75778bdf735ad65e92803bbf099d8a1172f7ff47def4d572057f60f16bdefaab9957f9b65d9dc49382035558dabbffde6
SSDEEP

12288:3n2wYHHLl5cQCCJF9ltekB9QcXFtTkYl3/HVpAK:32wgkUFtw

Score

N/A

Malware Config

Signatures

Files

e7d13b32fbd28b57686ad7a07b3655db40c04c337eb95140f3eac9adfffa7f66
.dll windows x86

97b6cd2a9db90e6533cb10a977d8a844

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
DeleteFileA
DeleteFileW
GetFileAttributesW
GetTempPathA
GetTempPathW
CloseHandle
ReadFile
WriteFile
GetLastError
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFileSize
LockFile
LockFileEx
UnlockFile
Sleep
GetFullPathNameA
GetFullPathNameW
GetSystemTime
GetSystemTimeAsFileTime
TlsSetValue
TlsGetValue
TlsAlloc
CreateFileA
CreateFileW
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
SetThreadPriority
ResumeThread
SetEvent
CreateMutexA
CreateEventA
InitializeCriticalSection
CreateThread
HeapFree
ExitProcess
RtlUnwind
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
RaiseException
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapSize
SetLastError
TlsFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedExchange
VirtualQuery
SetStdHandle
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetCPInfo
GetLocaleInfoA
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
VirtualProtect
GetSystemInfo
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateDirectoryA

Exports

Exports

?SUB_CallUseToggle@CBaseEntity@@QAEXXZ
AMXX_Attach
AMXX_Detach
AMXX_PluginsLoaded
AMXX_PluginsUnloaded
AMXX_PluginsUnloading
AMXX_Query
GetEngineFunctions
GetEngineFunctions_Post
GetEntityAPI2
GetEntityAPI2_Post
GetNewDLLFunctions
GetNewDLLFunctions_Post
GiveFnptrsToDll
Meta_Attach
Meta_Detach
Meta_Query

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

97b6cd2a9db90e6533cb10a977d8a844

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 264KB - Virtual size: 263KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 8KB - Virtual size: 14KB

.reloc Size: 12KB - Virtual size: 10KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 264KB - Virtual size: 263KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 8KB - Virtual size: 14KB

.reloc
Size: 12KB - Virtual size: 10KB

.rmnet
Size: 60KB - Virtual size: 60KB