General

Malware Config

Signatures

Files

• 04b9dc15b85634b340dc84cd95ac26c6fe733722e12937553de193493fd63327

  .dll windows x86

  7107281128e1fb491dd84ef3745bf4d7

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  RegOpenKeyExW

  RegQueryValueExW

  RegCloseKey

  kernel32

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  GetSystemTimeAsFileTime

  SetUnhandledExceptionFilter

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  Sleep

  LocalAlloc

  GetCurrentProcessId

  WaitForSingleObject

  CloseHandle

  CreateEventW

  LocalFree

  LoadLibraryW

  WideCharToMultiByte

  FreeLibrary

  GetLastError

  GetProcAddress

  DisableThreadLibraryCalls

  msvcrt

  free

  _initterm

  malloc

  _strlwr

  _adjust_fdiv

  ntdll

  NtCreateFile

  RtlInitUnicodeString

  NtDeviceIoControlFile

  ws2_32

  inet_addr

  Exports

  Exports

  AcsHlpAttemptConnection

  AcsHlpNbConnection

  AcsHlpNoteNewConnection

  WSAttemptAutodialAddr

  WSAttemptAutodialName

  WSNoteSuccessfulHostentLookup

  Sections

  .text

  Size: 4KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .texc

  Size: 2KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE