52b5f5938fc0e8896bf106259899bf6f6d59c2070eca665bc4f8a27a63f74512

Sharing

Copy URL Twitter E-mail

General

Target

52b5f5938fc0e8896bf106259899bf6f6d59c2070eca665bc4f8a27a63f74512
Size

127KB
MD5

0940fab4700d32acba8fd91e0716e670
SHA1

a1eab8797ef93ce9e50e4fdd4ab7c0d6a0a18c55
SHA256

52b5f5938fc0e8896bf106259899bf6f6d59c2070eca665bc4f8a27a63f74512
SHA512

8b29d63ca640f67740f4a450a6dab5ee69c1091887e6811b67e593fdf63de4870ccc6e0d6c35b1e3715a933058e442469c3e857490cb28aa368224386fcc6a1e
SSDEEP

1536:/Wm5QEqLyslUw0Kf63K7eDmp+Kgo54DHuFdTMfRnVXnwCJiC7WhkG7gd6T0JsaWv:/Wm5QEq70ago59FutVJGhkG7Z7fOY

Score

N/A

Malware Config

Signatures

Files

52b5f5938fc0e8896bf106259899bf6f6d59c2070eca665bc4f8a27a63f74512
.dll windows x86

d28c81374ecf408c880642a8b00abedd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
FlushFileBuffers
CloseHandle
CreateFileA
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
WriteFile
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetModuleHandleA

winmm

timeGetTime

ws2_32

gethostbyaddr
getservbyport
ntohs
inet_ntoa
htonl
WSAStartup
htons
WSAGetLastError
gethostbyname
inet_addr
WSASetLastError
WSACleanup
getservbyname

Exports

Exports

?GetDnsRandom@@YAHPAD0I@Z

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d28c81374ecf408c880642a8b00abedd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winmm

ws2_32

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 5KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 4KB - Virtual size: 4KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 5KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 4KB - Virtual size: 4KB

.rmnet
Size: 56KB - Virtual size: 60KB