94196fb43dbc234914aceb9910ce7f67ec203163703b1675c47395b590a29354

Sharing

Copy URL Twitter E-mail

General

Target

94196fb43dbc234914aceb9910ce7f67ec203163703b1675c47395b590a29354
Size

58KB
MD5

7e1ccf91b7d5c9a0108ebf227808a9e5
SHA1

291699ba8387e4e0501e6e64598eaf7d0a9fea26
SHA256

94196fb43dbc234914aceb9910ce7f67ec203163703b1675c47395b590a29354
SHA512

a30ddc0041739cdc9e19316483740380d465230c701f1a38fa3f259c69ab66ef501bbed8dc98ec12398f72898f5b5495a6c22f7fd77024b15e8c23ff730f89a7
SSDEEP

1536:zS7qk6nUwHhUBrH2FkmtaqUqdi4Bmft031:zFfhKH2WPq04Ift031

Score

N/A

Malware Config

Signatures

Files

94196fb43dbc234914aceb9910ce7f67ec203163703b1675c47395b590a29354
.dll windows x86

62cc787b4ab7e36f105e7ff2ea99f244

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtDelayExecution
NtCreateTimer
ZwFreeVirtualMemory
NtGetWriteWatch
ZwDebugActiveProcess
NtImpersonateAnonymousToken

kernel32

ReleaseSemaphore
InterlockedExchangeAdd
GetSystemDirectoryW
WaitForMultipleObjects
VirtualAlloc
CreateThread
CreateFileA
GetSystemTime
GetEnvironmentVariableA
WaitForMultipleObjectsEx
SetThreadPriority
lstrcpynW
GetPrivateProfileIntA
MultiByteToWideChar
GetPrivateProfileIntW
HeapFree
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
DeleteFileW
lstrcpynA
GetStringTypeExW
GetVersion
lstrlenA
DeleteCriticalSection
SetWaitableTimer
GetLocalTime
GetEnvironmentVariableW
CloseHandle
GetCurrentDirectoryW
GetCommandLineW
ReadProcessMemory
WideCharToMultiByte
GetCurrentThreadId
MapViewOfFile
GlobalAddAtomW
GetEnvironmentStrings
GetTickCount
OutputDebugStringA

Exports

Exports

CreateProcessNotify
NhpAllocateAndGetInterfaceInfoFromStack
GetOwnerModuleFromTcpEntry
DllClientCleanup
AllocateAndGetIpAddrTableFromStack
InternalGetIpNetTable
dvdugini
NTPTimeToNTFileTime
GetInterfaceInfo
DllClientStartup
GetAdaptersInfo
register_icmp
SetIpForwardEntry
CreateIpNetEntry
GetPerAdapterInfo
GetOwnerModuleFromUdpEntry
NotifyRouteChange
DeleteProxyArpEntry
IcmpParseReplies
DeleteIPAddress
InternalSetIfEntry
GetTcpStatistics
GetBestRoute
SetAdapterIpAddress
Icmp6SendEcho2
DeleteIpForwardEntry
GetExtendedTcpTable
SetIpTTL
SetIpNetEntry
NhGetInterfaceNameFromDeviceGuid
GetUdpStatisticsEx
GetBestInterfaceEx

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62cc787b4ab7e36f105e7ff2ea99f244

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 53KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 53KB - Virtual size: 53KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB