6a01c08fcf982d44ca7eaf91f5c9de9a0f6dd0eace9e4856af39a3320e779c1c

Sharing

Copy URL Twitter E-mail

General

Target

6a01c08fcf982d44ca7eaf91f5c9de9a0f6dd0eace9e4856af39a3320e779c1c
Size

48KB
MD5

7767679c311ffd2a89463ca7377fbcda
SHA1

564e7bfd5cc518645f91faf5c6a3e8f34e3dafe5
SHA256

6a01c08fcf982d44ca7eaf91f5c9de9a0f6dd0eace9e4856af39a3320e779c1c
SHA512

7642ca5d2d644db9a387bff3adc878bbed3e023369e45ac055d1cf914b20870001e1be38540988d3946e41e9c631c63fe833c18e29f4aaba3783a4fab96ea6ad
SSDEEP

768:etz6zJBvhgfm/C33QzfdpIK4nq4vFfXEqI7Ez7R:etz6lxhH/C33kff23I7Ez7R

Score

N/A

Malware Config

Signatures

Files

6a01c08fcf982d44ca7eaf91f5c9de9a0f6dd0eace9e4856af39a3320e779c1c
.dll windows x86

c3249dd629913038d9c3cd170d2fc97e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetGetConnectedState
InternetReadFile
InternetCloseHandle
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA

rpv

ord2
ord8

mfc42

ord801
ord4129
ord1622
ord541
ord858
ord939
ord860
ord1253
ord342
ord823
ord1182
ord540
ord800
ord537
ord2915
ord4160
ord535
ord1168
ord2818

msvcrt

_initterm
malloc
_ultoa
free
__dllonexit
sprintf
time
rand
_swab
srand
_mbsicmp
_mbscmp
strncpy
sscanf
_onexit
__CxxFrameHandler
_adjust_fdiv
?terminate@@YAXXZ
atol
_stricmp
_except_handler3
atof

kernel32

GetVersion
GlobalAlloc
GlobalFree
OutputDebugStringA
ResetEvent
CreateEventA
LoadLibraryA
GetProcAddress
ReleaseMutex
WaitForSingleObject
DeviceIoControl
ReadFile
WriteFile
GetTickCount
CloseHandle
CreateFileA
CreateMutexA
OpenMutexA
lstrlenA
FileTimeToSystemTime
SetSystemTime
GetLastError

wsock32

recv
connect
ioctlsocket
htons
socket
ntohl
closesocket

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA

Exports

Exports

rpm_info
rpm_init
rpm_query
rpm_quit
rpm_run

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3249dd629913038d9c3cd170d2fc97e

Headers

File Characteristics

Imports

wininet

rpv

mfc42

msvcrt

kernel32

wsock32

setupapi

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 72KB

.rsrc Size: 4KB - Virtual size: 256B

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 72KB

.rsrc
Size: 4KB - Virtual size: 256B

.reloc
Size: 4KB - Virtual size: 1KB