fb23a49817bffc0851ef3a1186414a5434e0fce90788be1bfba0fde8969f833b

Sharing

Copy URL

Twitter E-mail

General

Target

fb23a49817bffc0851ef3a1186414a5434e0fce90788be1bfba0fde8969f833b
Size

321KB
MD5

09b0f54b3f2c2674ce9f2adfedd166b0
SHA1

8f0e7f2287f39382bb5aea88f6ff3fbb0bae3fa0
SHA256

fb23a49817bffc0851ef3a1186414a5434e0fce90788be1bfba0fde8969f833b
SHA512

188428f80f4fbeb9aec130d8d9f6a4a9d5d276a4bbeb3963a2a03c8fb7df62b8847844f1e495b70577794d756e381f85095b1b9a7a2cba8074faadcef8e8926a
SSDEEP

6144:1is9PaG1wvxJaNxqcucvCN6RMYRBKgrFZpXBzXpEeq:Ys9SG16xJavqhcvCNYMYRBTF/hmeq

Score

N/A

Malware Config

Signatures

Files

fb23a49817bffc0851ef3a1186414a5434e0fce90788be1bfba0fde8969f833b
.dll windows x86

a6dfd594f0ea0a4e527a3214f6d4b3cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
CloseHandle
FlushFileBuffers

Exports

Exports

smlAddCmd
smlAlertCmd
smlAllocAdd
smlAllocAlert
smlAllocAtomic
smlAllocChal
smlAllocCopy
smlAllocCred
smlAllocDelete
smlAllocDevInfCTCap
smlAllocDevInfCTData
smlAllocDevInfCTDataList
smlAllocDevInfCTDataProp
smlAllocDevInfCTDataPropList
smlAllocDevInfCtcapList
smlAllocDevInfDSMem
smlAllocDevInfDatastore
smlAllocDevInfDatastoreList
smlAllocDevInfDevInf
smlAllocDevInfExt
smlAllocDevInfExtList
smlAllocDevInfSyncCap
smlAllocDevInfXmit
smlAllocDevInfXmitList
smlAllocExec
smlAllocGeneric
smlAllocGet
smlAllocItem
smlAllocItemList
smlAllocMap
smlAllocMapItem
smlAllocMapItemList
smlAllocMetInfAnchor
smlAllocMetInfMem
smlAllocMetInfMetInf
smlAllocMove
smlAllocPcdata
smlAllocPcdataList
smlAllocPut
smlAllocReplace
smlAllocResults
smlAllocSearch
smlAllocSequence
smlAllocSource
smlAllocSourceList
smlAllocSourceRefList
smlAllocStatus
smlAllocSync
smlAllocSyncHdr
smlAllocTarget
smlAllocTargetRefList
smlAllocUnknownProtoElement
smlCopyCmd
smlDeleteCmd
smlEndAtomic
smlEndEvaluation
smlEndMessage
smlEndSequence
smlEndSync
smlExecCmd
smlFreeAlert
smlFreeAtomic
smlFreeChalPtr
smlFreeCredPtr
smlFreeDevInfCTCap
smlFreeDevInfCTData
smlFreeDevInfCTDataList
smlFreeDevInfCTDataProp
smlFreeDevInfCTDataPropList
smlFreeDevInfCtcapList
smlFreeDevInfDSMem
smlFreeDevInfDatastore
smlFreeDevInfDatastoreList
smlFreeDevInfDevInf
smlFreeDevInfExt
smlFreeDevInfExtList
smlFreeDevInfSynccap
smlFreeDevInfXmit
smlFreeDevInfXmitList
smlFreeExec
smlFreeGeneric
smlFreeGetPut
smlFreeItemList
smlFreeItemPtr
smlFreeMap
smlFreeMapItemList
smlFreeMapItemPtr
smlFreeMetinfAnchor
smlFreeMetinfMem
smlFreeMetinfMetinf
smlFreePcdata
smlFreePcdataList
smlFreeProtoElement
smlFreeResults
smlFreeSearch
smlFreeSourceList
smlFreeSourceRefList
smlFreeSourceTargetPtr
smlFreeStatus
smlFreeSync
smlFreeSyncHdr
smlFreeTargetRefList
smlGetCmd
smlGetFreeBuffer
smlInit
smlInitInstance
smlLibFree
smlLibMalloc
smlLibMemcmp
smlLibMemcpy
smlLibMemmove
smlLibMemset
smlLibPrint
smlLibRealloc
smlLibStrcat
smlLibStrchr
smlLibStrcmp
smlLibStrcpy
smlLibStrdup
smlLibStrlen
smlLibStrncat
smlLibStrncmp
smlLibStrncpy
smlLibStrstr
smlLibVprintf
smlLockReadBuffer
smlLockWriteBuffer
smlMapCmd
smlMoveCmd
smlPcdata2String
smlPcdataDup
smlProcessData
smlPutCmd
smlReplaceCmd
smlResultsCmd
smlSearchCmd
smlSetCallbacks
smlSetEncoding
smlSetSyncMLOptions
smlSetUserData
smlStartAtomic
smlStartEvaluation
smlStartMessage
smlStartSequence
smlStartSync
smlStatusCmd
smlString2Pcdata
smlTerminate
smlTerminateInstance
smlUnlockReadBuffer
smlUnlockWriteBuffer

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 215KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a6dfd594f0ea0a4e527a3214f6d4b3cb

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 80KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 1016B

.reloc Size: 5KB - Virtual size: 4KB

.text Size: 215KB - Virtual size: 216KB

.text
Size: 80KB - Virtual size: 80KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 1016B

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 215KB - Virtual size: 216KB