dfe015ad15cf94a1c4e82f490c546bb1c5f3db1adcc41cac238699f89f27e7c1

Sharing

Copy URL

Twitter E-mail

General

Target

dfe015ad15cf94a1c4e82f490c546bb1c5f3db1adcc41cac238699f89f27e7c1
Size

43KB
MD5

dddb2fe33eaf017e22a8a24f08834887
SHA1

96400dcd6e9124dd8a31b3f49fce3d640785eb78
SHA256

dfe015ad15cf94a1c4e82f490c546bb1c5f3db1adcc41cac238699f89f27e7c1
SHA512

09e9fcc1c684da12384f1a957374a7bdbc24d9dffe0a8d391b3d37abc1b8232095966c72e31ba5152ad9ff5e43d6241e0040a5e5d24feec289529cac355f87cb
SSDEEP

768:6lU62sHOZpFemQQ2qw9d6iUfPLOesLZxTzaMTlg5Vpu+OVkQzbugBdipBR:6lSsHwpFIq71PLObJCw+PEbugABR

Score

N/A

Malware Config

Signatures

Files

dfe015ad15cf94a1c4e82f490c546bb1c5f3db1adcc41cac238699f89f27e7c1
.dll windows x86

d001fcc0699b7085e668c19f5cb28064

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
CreateEventA
GetVersion
InterlockedExchangeAdd
ReleaseSemaphore
GlobalDeleteAtom
InitializeCriticalSection
GetCommandLineW
CreateSemaphoreA
QueryPerformanceFrequency
InterlockedCompareExchange
CloseHandle
VirtualAlloc
LoadLibraryA
WritePrivateProfileStructA
SetFilePointer
GetTempFileNameW
DeleteFileA
MapViewOfFile
GetProcAddress
WritePrivateProfileStringA
GetProcessHeap
DuplicateHandle
GetTimeFormatW
GetVersion
GetPrivateProfileStructA
GetTempPathW
RaiseException
GetCurrentDirectoryW
CreateFileMappingA

ntdll

NtCreateSymbolicLinkObject
ZwGetPlugPlayEvent
NtCreateTimer
ZwGetDevicePowerState
NtDeviceIoControlFile
NtFlushBuffersFile
ZwFlushVirtualMemory
NtDeleteAtom
ZwDeleteKey
NtOpenEventPair
NtEnumerateValueKey
ZwFlushWriteBuffer

Exports

Exports

GetIpErrorString
NTTimeToNTPTime
CreateProcessNotify
DllClientCleanup
DeleteIpNetEntry
Opticont
InternalSetTcpEntry
GetTcpStatisticsEx
DllClientStartup
GetOwnerModuleFromTcpEntry
GetIcmpStatistics
SetTcpEntry
GetIpAddrTable
GetAdapterOrderMap
CreateIpForwardEntry
GetTcpStatistics
CreateIpNetEntry
DeleteIPAddress
NhGetInterfaceNameFromDeviceGuid
GetTcpTable
IcmpCloseHandle
UnenableRouter
InternalGetIpAddrTable
NotifyAddrChange
GetInterfaceInfo
InternalGetUdpTable
GetNumberOfInterfaces
GetIfEntry
NhpAllocateAndGetInterfaceInfoFromStack
AddIPAddress
GetUdpStatisticsEx
GetFriendlyIfIndex
GetNetworkParams
GetIpNetTable
SetIpStatistics

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d001fcc0699b7085e668c19f5cb28064

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 260B

.rsrc Size: 33KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 260B

.rsrc
Size: 33KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 4KB