0610e8ebd949fc06fea849b3d5c467113f71dec9a117af8a198172a7473a641f

Sharing

Copy URL Twitter E-mail

General

Target

0610e8ebd949fc06fea849b3d5c467113f71dec9a117af8a198172a7473a641f
Size

232KB
MD5

309d71aba48b1f5e06c7d46c6fa95560
SHA1

48d2ee0322480e84b38ea9dcf80a3dfd94f4ca3b
SHA256

0610e8ebd949fc06fea849b3d5c467113f71dec9a117af8a198172a7473a641f
SHA512

459f6a39f6a9ff3c112e72b206f9ec080621f72f1e428ff1a0546f3825614848a3caa3d867cd77b7f005ad1695bc6f605e9ef76330897b8466002ad3cd1c6d38
SSDEEP

3072:c/sRoPZWplLiCf2VE/1E25+xCktB2P3qwS9zJepIh+sosFxBIGtaX:NFpvkAGCmwqJv+sosFft

Score

N/A

Malware Config

Signatures

Files

0610e8ebd949fc06fea849b3d5c467113f71dec9a117af8a198172a7473a641f
.dll windows x86

32ceba0fde0fd04f7c8c33230f6b96b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetLastError
HeapFree
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
GetStringTypeA
WideCharToMultiByte
GetStringTypeW
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSection
RtlUnwind
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
SetFilePointer
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
CloseHandle
FlushFileBuffers
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

MM_InitWrapper

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

32ceba0fde0fd04f7c8c33230f6b96b0

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 129KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 5KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 132KB - Virtual size: 129KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 5KB

.rmnet
Size: 60KB - Virtual size: 60KB