cab233a054e90e094e68811e2f8f292feb156d45e8dbe9b8a077f47a4e448d17

Sharing

Copy URL Twitter E-mail

General

Target

cab233a054e90e094e68811e2f8f292feb156d45e8dbe9b8a077f47a4e448d17
Size

598KB
MD5

d4af6ecc9a75376220c7e48d706a2486
SHA1

1f35415e72b815bac18bca14016c48872c3b6a42
SHA256

cab233a054e90e094e68811e2f8f292feb156d45e8dbe9b8a077f47a4e448d17
SHA512

234aec1bd7005379593fd7f30911b76021d7140d4c366414f218de8b938c2329993ba138c8548ea1be67b6575d0fadd984c30ebe498e6ecafc00e2f7d17c3a1e
SSDEEP

3072:xEO4B8+kf2BeuQNRxYBxKFEuItAr+wIPDBDbO6gwyRbBtfrLbpmaYeLF+1CgUk9s:GO4BurDjxiZsLNZZ9gUk9br8

Score

N/A

Malware Config

Signatures

Files

cab233a054e90e094e68811e2f8f292feb156d45e8dbe9b8a077f47a4e448d17
.exe windows x86

73fce0c323f5a937d1dee3697821c4d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rfdllmanager

?SetPath@CRFDllManagerAPI@@SAXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?OCXsRegister@CRFDllManagerAPI@@SAXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?OCXFree@CRFDllManagerAPI@@SAXXZ

rfcommonbase

?GetModulePath@CRFProcess@@SAAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ

mfc90

ord1254
ord265
ord1252
ord6802
ord1276
ord1137
ord5761
ord262
ord266
ord3579
ord4197
ord1098
ord817
ord910
ord1183
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord589
ord316
ord793
ord601
ord4952
ord4029
ord800

msvcr90

_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memset
memcpy_s
__argc
__argv
_setmbcp
_invoke_watson
_crt_debugger_hook
_controlfp_s
__CxxFrameHandler3
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit

kernel32

InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
GetStartupInfoA
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
lstrcmpiA
UnhandledExceptionFilter
GetCurrentProcess

comctl32

ord17

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 587KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73fce0c323f5a937d1dee3697821c4d4

Headers

DLL Characteristics

File Characteristics

Imports

rfdllmanager

rfcommonbase

mfc90

msvcr90

kernel32

comctl32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 587KB - Virtual size: 586KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 587KB - Virtual size: 586KB