51cb383a3b324040da470f6a679b653a1dc9b28d6c570de152126938d53a77e8

Sharing

Copy URL Twitter E-mail

General

Target

51cb383a3b324040da470f6a679b653a1dc9b28d6c570de152126938d53a77e8
Size

372KB
MD5

c4d460593d6cb1b2a1f84b8bc7b50e06
SHA1

50174f478ac9a732f509ac5979518037280486f8
SHA256

51cb383a3b324040da470f6a679b653a1dc9b28d6c570de152126938d53a77e8
SHA512

8639f5051ab1376780e4d979fd1c56b60699e44aa2528969a208d859393f9bc4fe516089ef6ef2c7e1d5a66071b5f0f71162988c6663101151f2dcad1b729e07
SSDEEP

6144:ctp+Pko5XhI/0X29jl8DP/ETbq74o8fYFrvT6ht63QLmbAdDG2uCI0DZXDX:9ko5XhIW2jjLGrr6D63SmKQCI0DZXDX

Score

N/A

Malware Config

Signatures

Files

51cb383a3b324040da470f6a679b653a1dc9b28d6c570de152126938d53a77e8
.dll windows x86

659d6dda082b81bb8134dea087787acc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dbghelp

SymRegisterCallback64
SymInitialize
SymFindFileInPath
SymSetSearchPath
SymSetOptions
MakeSureDirectoryPathExists
SymCleanup

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

msvcrt

printf
memset
memcpy
malloc
isspace
isdigit
fseek
free
fprintf
fopen
fgets
fclose
exit
atoi
_vsnprintf
puts
_stricmp
_msize
_ismbblead
_iob
_initterm
_exit
_errno
_controlfp
_cexit
_amsg_exit
__setusermatherr
__set_app_type
__p__fmode
__getmainargs
_XcptFilter
rand
realloc
scanf
srand
strchr
strncmp
strrchr
strstr
time
tolower
_strnset

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

kernel32

UnmapViewOfFile
UnhandledExceptionFilter
Thread32Next
TerminateThread
TerminateProcess
SetUnhandledExceptionFilter
SetLastError
SetFilePointer
SetFileAttributesA
SetErrorMode
SetEndOfFile
RemoveDirectoryA
ReadFile
QueryPerformanceCounter
OutputDebugStringA
OpenProcess
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryA
IsBadHugeWritePtr
InterlockedExchange
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
VirtualAlloc
GetTickCount
GetTempPathA
GetTempFileNameA
GetSystemTimeAsFileTime
GetProcessPriorityBoost
GetProcessHeap
GetProcAddress
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetModuleHandleA
GetLastError
GetFullPathNameA
GetFileSize
GetFileInformationByHandle
GetFileAttributesExA
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetConsoleCursorInfo
GetCommandLineA
GetCommMask
GenerateConsoleCtrlEvent
FreeLibrary
WriteFile
_lread
HeapAlloc
DeleteFileA
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
ExitProcess
ExpandEnvironmentStringsA
FindClose
FindFirstFileA
FindFirstFileExA
FindNextFileA
FlushViewOfFile

Exports

Exports

CreateAdapterConfigurationPort
CreateSphere
CreateVolumeTextureFromFileA
FrameFind
GetLDAPTypeName
GetRTFOptions
PlaneIntersectLine
Vec3TransformArray

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

659d6dda082b81bb8134dea087787acc

Headers

File Characteristics

Imports

dbghelp

version

msvcrt

advapi32

kernel32

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 74KB

.rdata Size: 166KB - Virtual size: 166KB

.data Size: 68KB - Virtual size: 68KB

.rsrc Size: 57KB - Virtual size: 56KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 75KB - Virtual size: 74KB

.rdata
Size: 166KB - Virtual size: 166KB

.data
Size: 68KB - Virtual size: 68KB

.rsrc
Size: 57KB - Virtual size: 56KB

.reloc
Size: 4KB - Virtual size: 4KB