General

Malware Config

Signatures

Files

• 79574588204ab06f22ec822a96ec8859f114dcbd0f200b24059827cd3b50e9e8

  .dll windows x86

  984c196cb7b1e0893ceb186970b64bd1

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ws2_32

  htonl

  ntohl

  getaddrinfo

  freeaddrinfo

  gethostname

  kernel32

  GetCurrentThreadId

  ExpandEnvironmentStringsA

  GetLastError

  GetProcAddress

  LoadLibraryA

  GetCurrentProcessId

  LocalFree

  FormatMessageA

  GetVersionExA

  Sleep

  GetSystemTimeAsFileTime

  IsDebuggerPresent

  DisableThreadLibraryCalls

  FreeLibrary

  GetTickCount

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  InterlockedExchange

  QueryPerformanceCounter

  advapi32

  RegQueryValueExA

  RegCloseKey

  GetUserNameA

  RegOpenKeyExA

  msvcr90

  strncpy

  isalnum

  realloc

  calloc

  malloc

  getenv

  isdigit

  _snprintf

  strerror

  fclose

  tolower

  isupper

  fgets

  strchr

  _time64

  clock

  _strnicmp

  _getch

  fflush

  fprintf

  __iob_func

  strtol

  atoi

  _stat64i32

  _findclose

  _findnext64i32

  strrchr

  _findfirst64i32

  _encode_pointer

  _malloc_crt

  _encoded_null

  _decode_pointer

  _initterm

  _initterm_e

  _amsg_exit

  _adjust_fdiv

  __CppXcptFilter

  _crt_debugger_hook

  __clean_type_info_names_internal

  _unlock

  __dllonexit

  _lock

  _onexit

  _except_handler4_common

  free

  printf

  isspace

  memcpy

  strncat

  memset

  _stricmp

  _strdup

  fopen

  rand

  Exports

  Exports

  auxprop_plugin_info

  getopt

  getpass

  getsubopt

  optarg

  opterr

  optind

  prop_clear

  prop_dispose

  prop_dup

  prop_erase

  prop_format

  prop_get

  prop_getnames

  prop_new

  prop_request

  prop_set

  prop_setvals

  sasl_auxprop_add_plugin

  sasl_auxprop_getctx

  sasl_auxprop_request

  sasl_auxprop_store

  sasl_canonuser_add_plugin

  sasl_checkapop

  sasl_checkpass

  sasl_churn

  sasl_client_add_plugin

  sasl_client_init

  sasl_client_new

  sasl_client_plugin_info

  sasl_client_start

  sasl_client_step

  sasl_decode

  sasl_decode64

  sasl_dispose

  sasl_done

  sasl_encode

  sasl_encode64

  sasl_encodev

  sasl_erasebuffer

  sasl_errdetail

  sasl_errstring

  sasl_getprop

  sasl_global_listmech

  sasl_global_utils

  sasl_idle

  sasl_listmech

  sasl_mkchal

  sasl_rand

  sasl_randcreate

  sasl_randfree

  sasl_randseed

  sasl_server_add_plugin

  sasl_server_init

  sasl_server_new

  sasl_server_plugin_info

  sasl_server_start

  sasl_server_step

  sasl_set_alloc

  sasl_set_mutex

  sasl_set_path

  sasl_seterror

  sasl_setpass

  sasl_setprop

  sasl_user_exists

  sasl_utf8verify

  sasl_version

  sasl_version_info

  Sections

  .text

  Size: 50KB - Virtual size: 49KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ