06c549bfceeb4a9ea2336825d87e7987d2c18c48e2861e881e3cbb31585242f5

Sharing

Copy URL Twitter E-mail

General

Target

06c549bfceeb4a9ea2336825d87e7987d2c18c48e2861e881e3cbb31585242f5
Size

315KB
MD5

31c752d20d5ff2c38fa542782ef76a09
SHA1

eef033a3783bdb8267e2440736b91eda4b5e486d
SHA256

06c549bfceeb4a9ea2336825d87e7987d2c18c48e2861e881e3cbb31585242f5
SHA512

6fe48e955a6d2d941f93c33e0442e8ee967f87b4dfd91e7574d1f7bf3685dda4f9bc8cba4e7beedb43d7745b84816bfd87d483d38516c9083f67ae14c9fb20ae
SSDEEP

6144:jO3f7AN+6t/S+XMKRodTTw0BJ+x7UHqS30EnbD5aLOsFeiN/REvh:63jAs6t5qdHikkL74iPEvh

Score

N/A

Malware Config

Signatures

Files

06c549bfceeb4a9ea2336825d87e7987d2c18c48e2861e881e3cbb31585242f5
.dll windows x86

877ba26071338dfde2a900b1612075df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

bsearch
_resetstkoflw
_vsnprintf
_wcsnicmp
toupper
memmove
_amsg_exit
_initterm
free
malloc
_XcptFilter
wcstoul
_wcsicmp
swscanf
memcpy
_vsnwprintf
wcsrchr
memset
wcschr

ntdll

RtlUnwind
NtQueryInformationFile
RtlNtStatusToDosError
NtOpenProcess
NtQueryInformationProcess
LdrUnloadDll
LdrGetProcedureAddress
LdrLoadDll
RtlInitUnicodeString
RtlGetLastNtStatus
RtlIsTextUnicode
RtlUnicodeToMultiByteN
RtlUnicodeToMultiByteSize
RtlMultiByteToUnicodeN
RtlMultiByteToUnicodeSize
NtQuerySystemInformation
RtlUpcaseUnicodeChar
RtlGUIDFromString
NtSetInformationFile
RtlFreeHeap
RtlAllocateHeap
RtlReAllocateHeap
NtClose
RtlRandomEx
RtlVerifyVersionInfo

kernel32

GetFileSizeEx
SetEndOfFile
GetCurrentThread
DeviceIoControl
SystemTimeToFileTime
FileTimeToLocalFileTime
CreateMutexW
WideCharToMultiByte
GetStringTypeExW
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
FormatMessageW
GetCommandLineA
GetFileInformationByHandle
GetLocalTime
lstrlenA
FileTimeToSystemTime
MoveFileW
FlushFileBuffers
CompareFileTime
ReleaseMutex
WaitForMultipleObjectsEx
LZCreateFileW
LZCopy
LZCloseFile
GetShortPathNameW
GetFileSize
GetFileTime
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
SetFilePointer
WriteFile
ReadFile
CreateFileA
MultiByteToWideChar
SetErrorMode
GetFileAttributesExW
GetModuleFileNameA
RaiseException
GetSystemDirectoryW
SetEvent
CreateEventW
WaitForSingleObjectEx
GetVersionExW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VerSetConditionMask
LoadLibraryExW
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
InterlockedExchange
SetLastError
GetLastError
lstrcmpiW
GetFileAttributesW
lstrlenW
GetSystemWindowsDirectoryW
LocalFree
CreateDirectoryW
GetDriveTypeW
GetWindowsDirectoryW
GetFullPathNameW
GetEnvironmentVariableW
GetTickCount
FindClose
FindNextFileW
CloseHandle
CompareStringW
LCMapStringW
Sleep
CreateFileW
GetCurrentThreadId
GetProcAddress
GetModuleHandleW
GetCurrentProcess
RemoveDirectoryW
DeleteFileW
SetFileAttributesW
lstrcmpW
FindFirstFileW
CopyFileW
CreateHardLinkW
MoveFileExW
GetTempFileNameW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
LoadLibraryExA
LoadLibraryW
InterlockedCompareExchange
FreeLibrary
PrivCopyFileExW
DelayLoadFailureHook
GetThreadLocale

Exports

Exports

DriverPackageClose
DriverPackageEnumDriversW
DriverPackageEnumFilesW
DriverPackageEnumRegKeysW
DriverPackageEnumServicesW
DriverPackageGetVersionInfoW
DriverPackageOpenW
DriverStoreClose
DriverStoreDeleteW
DriverStoreEnumW
DriverStoreFindW
DriverStoreImportW
DriverStoreOfflineAddDriverPackageA
DriverStoreOfflineAddDriverPackageW
DriverStoreOfflineDeleteDriverPackageA
DriverStoreOfflineDeleteDriverPackageW
DriverStoreOfflineEnumDriverPackageA
DriverStoreOfflineEnumDriverPackageW
DriverStoreOfflineEnumPublishedInfA
DriverStoreOfflineEnumPublishedInfW
DriverStoreOfflineFindDriverPackageA
DriverStoreOfflineFindDriverPackageW
DriverStoreOpenW
DriverStorePublishW
DriverStoreReflectCriticalW
DriverStoreReflectW
DriverStoreSetLogContext
DriverStoreUnpublishW
DriverStoreUnreflectCriticalW
DriverStoreUnreflectW
pServerDeleteDriverPackage
pServerImportDriverPackage

Sections

.text
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

877ba26071338dfde2a900b1612075df

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

kernel32

Exports

Exports

Sections

.text Size: 297KB - Virtual size: 297KB

.data Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 1016B

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 297KB - Virtual size: 297KB

.data
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 1016B

.reloc
Size: 11KB - Virtual size: 10KB