63abdcc9f507e9f726c221db77436a913fe637334b3a364a0471c098e95f8109

General

Target

63abdcc9f507e9f726c221db77436a913fe637334b3a364a0471c098e95f8109
Size

36KB
MD5

98a6d0934eb889c6f40e7442d29983b8
SHA1

9bae5999681e75e5acad0bc4595e85e85699cd19
SHA256

63abdcc9f507e9f726c221db77436a913fe637334b3a364a0471c098e95f8109
SHA512

a2624e31657a6f9331d368fd7eae4cc2472eeecc0896170d8ca8a40ad0c909f582a75e7bfba914ddba1defb823eb338da6369ab7f4bb5c2a5c32787a6192b67c
SSDEEP

384:tTQL+4zcT5xTK2hjGY+mlAa5yT0HC6Wo9LhSPaN:tT4vcTre+Gg5ViJo9LoP

Score

N/A

Malware Config

Signatures

Files

63abdcc9f507e9f726c221db77436a913fe637334b3a364a0471c098e95f8109
.dll windows x86

158dcab1fb37b4f6f25a277f8037fe32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
GetModuleFileNameA
GetVersionExA
DeviceIoControl
GetModuleHandleA
GetLastError
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

advapi32

CloseServiceHandle
ControlService
StartServiceA
OpenServiceA
DeleteService
OpenSCManagerA
CreateServiceA

Exports

Exports

GetPhysLong
GetPortVal
InitializeWinIo
InstallWinIoDriver
MapPhysToLin
RemoveWinIoDriver
SetPhysLong
SetPortVal
ShutdownWinIo
UnmapPhysicalMemory

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

158dcab1fb37b4f6f25a277f8037fe32

Headers

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 920B

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 920B

.reloc
Size: 4KB - Virtual size: 1KB