ddbf5c2c5f30de3792afa832edb9a29085829adb59794826e428d1bd4d32d873

Sharing

Copy URL Twitter E-mail

General

Target

ddbf5c2c5f30de3792afa832edb9a29085829adb59794826e428d1bd4d32d873
Size

468KB
MD5

3001e709bc79eb51d6de97a8a8c119b0
SHA1

79623cabb22bf55b88cfaf47036e082b8244029e
SHA256

ddbf5c2c5f30de3792afa832edb9a29085829adb59794826e428d1bd4d32d873
SHA512

63849790ed2be0d2a73c60540d8298e187defc340a9d0030015602b6b979dc88687542ea7d194eb1e40657767b32a156c203c63ee2bd5429bf7124dc038ba0b7
SSDEEP

12288:CDCtgdNXO4jMSgHxvzmQP595FOCc0uqt3kQsvGI6nOxtB8p9hnQszeXW8gj/0:CSgd1OrN4tByBeXW8gr0

Score

N/A

Malware Config

Signatures

Files

ddbf5c2c5f30de3792afa832edb9a29085829adb59794826e428d1bd4d32d873
.dll windows x86

37089b5b14fb42032fa685a7fadb231d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dbg

Error

kernel32

GetVersionExA
CloseHandle
GetProcAddress
LoadLibraryA
GetModuleHandleA
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetLocalTime
IsBadReadPtr
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
Sleep
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
CreateDirectoryA
WideCharToMultiByte
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
RaiseException
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadCodePtr
SetFilePointer
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetStdHandle
GetLocaleInfoW
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers

Exports

Exports

CreateInterface

Sections

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

37089b5b14fb42032fa685a7fadb231d

Headers

File Characteristics

Imports

dbg

kernel32

Exports

Exports

Sections

.text Size: 296KB - Virtual size: 295KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 32KB - Virtual size: 52KB

.reloc Size: 32KB - Virtual size: 31KB

.rmnet Size: 56KB - Virtual size: 56KB

.text
Size: 296KB - Virtual size: 295KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 32KB - Virtual size: 52KB

.reloc
Size: 32KB - Virtual size: 31KB

.rmnet
Size: 56KB - Virtual size: 56KB