eacce4a99e3fe861f7b21182c09babe22961ca92d2a6382fdd11f3bda0c27068

Sharing

Copy URL Twitter E-mail

General

Target

eacce4a99e3fe861f7b21182c09babe22961ca92d2a6382fdd11f3bda0c27068
Size

64KB
MD5

1efd76e2aace830868932fc98f64f3ca
SHA1

25fa1e5a9d08f835995bc853345139ccec1e110e
SHA256

eacce4a99e3fe861f7b21182c09babe22961ca92d2a6382fdd11f3bda0c27068
SHA512

c2b7c93ae500f02e0d3ea14b60c864f3c19cb1c2153fd34454d9ae1188adb538398f8984304a342f11de79332be148ee76f99802d019b3ba06cad3f3a84b46c3
SSDEEP

1536:qehU7eNb2pRYqZewBTik99WHmd60IKwzg:XhZ2pCqZqmM0IK

Score

N/A

Malware Config

Signatures

Files

eacce4a99e3fe861f7b21182c09babe22961ca92d2a6382fdd11f3bda0c27068
.dll windows x86

09008ffc464058cc25d1c6903107efff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteVolumeMountPointA
CloseHandle
FlushFileBuffers
SetVolumeMountPointA
Sleep
GetVersionExA
MultiByteToWideChar
DeviceIoControl
SetEndOfFile
GetWindowsDirectoryA
GetFileSize
CopyFileA
GetSystemDirectoryA
DeleteFileA
DefineDosDeviceA
GetVolumeNameForVolumeMountPointA
GetVolumeInformationA
GetDiskFreeSpaceA
WriteFile
SetFilePointer
ReadFile
GetLastError
GetModuleFileNameA
CreateFileA
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

advapi32

RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
RegDeleteKeyA

Exports

Exports

?CreateProtectFile@@YGHPAD@Z
AddSaveAreaFile
AddSaveAreaFile_OnInstall
ChangePassWord
CheckPassWord
DriverIsProtected
GetDriveState
GetHDInfo
GetMountInfo
GetProtectArea
GetProtectedDrives
Install
Install4DosChar
Install4DosChar_Path
InstallDriver
MountPtDosChar
RWAPData
ReSetSaveArea
SetProtectArea
SetProtectAreaForDosChar
UMountPtDosChar
UMountPtDosChar_Old
UnInstallDriver

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09008ffc464058cc25d1c6903107efff

Headers

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 9KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 9KB

.reloc
Size: 4KB - Virtual size: 3KB