be5c7e2cfbcbf98b158d61300b4a6ed29a8daaafd0e95c256590e5e9b5074b0a

Sharing

Copy URL Twitter E-mail

General

Target

be5c7e2cfbcbf98b158d61300b4a6ed29a8daaafd0e95c256590e5e9b5074b0a
Size

196KB
MD5

09489771ba5d71e2b954bb9223812690
SHA1

8f36caa7e1b89c7ccf098eecb0a91edcec768f4d
SHA256

be5c7e2cfbcbf98b158d61300b4a6ed29a8daaafd0e95c256590e5e9b5074b0a
SHA512

037a5a971cd9b06dff42f644d877d1222b76cc7160edf6fc58d5f92be8d315b6a824c3fd2dd426574f1ec1baa41e26e6a9e19e8a962dfb57edf1232d14db44ad
SSDEEP

3072:dXALdbhyjw99IGqpFV6hdN2u37+azZtzW2F2JbNhkBzpnjN:pWdQw3C1652y7l1F2/S7x

Score

N/A

Malware Config

Signatures

Files

be5c7e2cfbcbf98b158d61300b4a6ed29a8daaafd0e95c256590e5e9b5074b0a
.dll windows x86

1470a4a861481f88a54d9959b7f0e507

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__mb_cur_max
free
malloc
sprintf
strtol
strtoul
tolower
getenv
strrchr
strtok
getc
_iob
printf
fprintf
_isctype
toupper
_pctype
fputs
_strdup
_initterm
_adjust_fdiv
realloc
fclose
fopen
_stat

kernel32

DisableThreadLibraryCalls
GetModuleFileNameA

Exports

Exports

ToolConf_Add
ToolConf_AddChild
ToolConf_AddFlag
ToolConf_AddTagged
ToolConf_AddTyped
ToolConf_Child
ToolConf_Clone
ToolConf_Cmp
ToolConf_DLookupBool
ToolConf_DLookupChildInt
ToolConf_DLookupInt
ToolConf_DLookupPtr
ToolConf_DLookupUInt
ToolConf_Delete
ToolConf_EnumerateTags
ToolConf_FlatChild
ToolConf_FlatLookup
ToolConf_IterateTags
ToolConf_Lookup
ToolConf_LookupChild
ToolConf_New
ToolConf_NumberOfTags
ToolConf_Parent
ToolConf_Power
ToolConf_Read
ToolConf_ReadFrom
ToolConf_ReadFromFile
ToolConf_ReadFromMemory
ToolConf_ReadFromString
ToolConf_Reset
ToolConf_Tidy
ToolConf_Update
ToolConf_UpdateChild
ToolConf_UpdateChildInt
ToolConf_UpdateTagged
ToolConf_UpdateTyped
ToolConf_Write
ToolConf_WriteTo

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1470a4a861481f88a54d9959b7f0e507

Headers

File Characteristics

Imports

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 776B

.reloc Size: 4KB - Virtual size: 1KB

.text Size: 164KB - Virtual size: 164KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 776B

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 164KB - Virtual size: 164KB