03e6a299aae0b25d0d1d1e846f00ba0476d84009c63817fbc55fff90b1e8b9c8

Sharing

Copy URL Twitter E-mail

General

Target

03e6a299aae0b25d0d1d1e846f00ba0476d84009c63817fbc55fff90b1e8b9c8
Size

96KB
MD5

5ce9e8ab0d77a30d025ee2d5cd43318e
SHA1

ce096170e1897208ed39fa1990ffd96da0a3c490
SHA256

03e6a299aae0b25d0d1d1e846f00ba0476d84009c63817fbc55fff90b1e8b9c8
SHA512

27ccf99f54be167886b86a246c0a75b96f32cb2062f5594d572dae2c989b0ec74af2fcf231094cb8d2c8ba68cc99e912cfb4365adee5fd315ee0252b984ac79e
SSDEEP

1536:pkdpnO3BkG1wMFumrwsu00G457tfkfyoWBquL3cDnwsWjcdcisTEkV:pkdpnSDrL0p5RsybtE/ETLV

Score

N/A

Malware Config

Signatures

Files

03e6a299aae0b25d0d1d1e846f00ba0476d84009c63817fbc55fff90b1e8b9c8
.dll windows x86

143642cd6e986dcab5d97aa76c21ce84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

NetLocalGroupAddMembers
NetGroupAddUser
NetUserAdd

mpr

WNetCancelConnection2A
WNetAddConnection2A

kernel32

ExitProcess
SetUnhandledExceptionFilter
ExitThread
GetProcAddress
CloseHandle
GetCurrentProcess
DuplicateHandle
GetModuleHandleA
GetLastError
GetCurrentThread
LoadLibraryExW
OutputDebugStringW
SetStdHandle
WriteConsoleW
HeapSize
FlushFileBuffers
OpenProcess
GetStdHandle
RaiseException
FreeLibrary
LoadLibraryExA
HeapFree
HeapAlloc
HeapReAlloc
MultiByteToWideChar
GetCommandLineA
GetCurrentThreadId
GetProcessHeap
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetModuleHandleExW
WideCharToMultiByte
CreateFileW
WriteFile
GetModuleFileNameW
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
RtlUnwind
VirtualQuery
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
LCMapStringW

advapi32

LookupAccountSidA
LookupPrivilegeNameA
GetTokenInformation
OpenProcessToken
DuplicateTokenEx
ImpersonateLoggedOnUser
OpenThreadToken
RevertToSelf
LookupPrivilegeValueA

Exports

Exports

DeinitServerExtension
InitServerExtension
_ReflectiveLoader@0

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

143642cd6e986dcab5d97aa76c21ce84

Headers

DLL Characteristics

File Characteristics

Imports

netapi32

mpr

kernel32

advapi32

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 5KB - Virtual size: 13KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 5KB - Virtual size: 13KB

.reloc
Size: 4KB - Virtual size: 3KB