cd1ffb62c853eb3a6db0f8281ffca79cf778d24ca4d4b6611dbf895c73e930ff

Sharing

Copy URL

Twitter E-mail

General

Target

cd1ffb62c853eb3a6db0f8281ffca79cf778d24ca4d4b6611dbf895c73e930ff
Size

152KB
MD5

20cf8a9e7d31e4c6082a8e55d85b1ac0
SHA1

57df4a1e92a10a52493c73e8843040477d07a254
SHA256

cd1ffb62c853eb3a6db0f8281ffca79cf778d24ca4d4b6611dbf895c73e930ff
SHA512

d0caea801b4cb3ac63c6347bde32c3bb48c4d5fdcf15a8aafa42dd118366f9867b4e4bea293fc9eaf0afc5115663e6b2d1101196d8582d3c37fdf306fb54fe10
SSDEEP

3072:3RdSJVFK3BVDLteR08FDDrRTwx7FHdSaL8:3ReVg3oRl3rW7/B

Score

N/A

Malware Config

Signatures

Files

cd1ffb62c853eb3a6db0f8281ffca79cf778d24ca4d4b6611dbf895c73e930ff
.dll windows x86

737fbb800fdb542d65dce2bca9cce225

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces

psapi

EnumProcesses

kernel32

IsDebuggerPresent
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetLastError
DeviceIoControl
GetOverlappedResult
WaitForSingleObject
WriteFile
CloseHandle
ReadFile
CreateEventA
ReleaseMutex
UnmapViewOfFile
ExitThread
SetEvent
ResetEvent
OpenMutexA
CreateMutexA
MapViewOfFile
CreateFileMappingA
CreateThread
GetCurrentProcessId
SetNamedPipeHandleState
WaitNamedPipeA
SetStdHandle
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
MultiByteToWideChar
GetLocaleInfoA
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

MessageBoxA

Exports

Exports

IccLibAcquireClockOwnership
IccLibAcquireUOBOwnership
IccLibDialToFrequency
IccLibFrequencyToDial
IccLibGetClockCount
IccLibGetClockNearestFrequency
IccLibGetClockRanges
IccLibGetClockSettings
IccLibGetLockInfo
IccLibGetUobLockInfo
IccLibInit
IccLibReleaseClockOwnership
IccLibReleaseUOBOwnership
IccLibSetClockSettings
IccLibShutdown
IccLibStopUsingSimulator
IccLibUseSimulator

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

737fbb800fdb542d65dce2bca9cce225

Headers

File Characteristics

Imports

setupapi

psapi

kernel32

user32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 8KB - Virtual size: 4KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 8KB - Virtual size: 4KB

.rmnet
Size: 60KB - Virtual size: 60KB