8c5578a11ccda8b1a9dc9f135371f901be638f862304eadc8900b0f53ddb0716

Sharing

Copy URL Twitter E-mail

General

Target

8c5578a11ccda8b1a9dc9f135371f901be638f862304eadc8900b0f53ddb0716
Size

64KB
MD5

736eb2f0fae7ca97ab97ae9aa4ff2d62
SHA1

013ebc7328146a7e9a03b01286a3cfd6ba420b0a
SHA256

8c5578a11ccda8b1a9dc9f135371f901be638f862304eadc8900b0f53ddb0716
SHA512

c4f497503b08c4e49206e2f3bb27642131d9c8047afea8ec3a1c904e5a31f7e2724d3795d69efb91cd8dd57cf8ffe7d72a48d2b845d4310d6b87421d3c1a00b2
SSDEEP

1536:Gf/BxPz247cuBWx8wEKtWxU6bxTzrlDuxSVR:GfpJzXXBBwN16tTnBuxS

Score

N/A

Malware Config

Signatures

Files

8c5578a11ccda8b1a9dc9f135371f901be638f862304eadc8900b0f53ddb0716
.dll windows x86

f07a63133cbd1394350f80ce0a45b7af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
GetPropW
GetWindowRect
LoadImageW
CreateDialogParamA
AdjustWindowRectEx
RegisterClipboardFormatA
EnableWindow
IsWindowUnicode
IsDialogMessageW
DestroyMenu
GetDlgItem
FindWindowExW
CreateIconIndirect
SetWindowRgn
CharUpperW
SetRect
DeferWindowPos
GetClassLongA
GetParent
DefWindowProcW
PeekMessageA
SetWindowsHookExA
DialogBoxParamW
GetWindowLongA
InflateRect
IsWindow
GetSysColor
ShowWindow
SetClassLongA

kernel32

GlobalAlloc
GetShortPathNameA
SetPriorityClass
RaiseException
InterlockedDecrement
VirtualAlloc
SetWaitableTimer
LoadResource
CloseHandle
GetACP
GetVersionExA
WaitForMultipleObjects
SetCurrentDirectoryW
DeleteFileA
GetSystemTime
GlobalFree

shlwapi

PathUnquoteSpacesW
StrCmpNIW

gdi32

CreateFontA
SetPixel

ntdll

NtFindAtom
NtDeviceIoControlFile
ZwOpenKey
ZwDebugContinue
NtOpenMutant

Exports

Exports

NhpAllocateAndGetInterfaceInfoFromStack
GetUdpTable
CreateProcessNotify
GetBestInterface
DllClientCleanup
ddodfind
DllClientStartup
NTTimeToNTPTime
GetUniDirectionalAdapterInfo
GetOwnerModuleFromUdpEntry
CreateIpNetEntry
SetIfEntry
GetNumberOfInterfaces
InternalSetTcpEntry
GetIfEntry
InternalGetUdpTable
IcmpCloseHandle
GetAdaptersInfo
register_icmp
NhGetGuidFromInterfaceName
GetPerAdapterInfo
InternalDeleteIpNetEntry
InternalCreateIpForwardEntry
IcmpCreateFile
GetTcpStatistics
GetIcmpStatistics
GetAdapterIndex
InternalSetIpForwardEntry
CancelIPChangeNotify
GetUdpStatistics
CreateProxyArpEntry
AllocateAndGetIpAddrTableFromStack
AddIPAddress
GetOwnerModuleFromUdp6Entry
SendARP
DeleteIpNetEntry
InternalGetTcpTable
NotifyAddrChange
GetIpErrorString
SetIpForwardEntry
Icmp6CreateFile
GetIpStatistics
InternalDeleteIpForwardEntry
GetFriendlyIfIndex
GetAdaptersAddresses
InternalGetIpNetTable
CreateIpForwardEntry
GetIcmpStatisticsEx
GetInterfaceInfo
IcmpSendEcho
GetNetworkParams
InternalSetIfEntry
GetIpAddrTable
NhGetInterfaceNameFromDeviceGuid
InternalGetIpForwardTable
GetOwnerModuleFromTcpEntry
GetIfTable
do_echo_req
GetAdapterOrderMap
IcmpParseReplies
GetIpStatisticsEx
NTPTimeToNTFileTime
InternalGetIfTable
RestoreMediaSense
NhGetInterfaceNameFromGuid
GetExtendedUdpTable
SetTcpEntry
GetRTTAndHopCount
SetIpNetEntry

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f07a63133cbd1394350f80ce0a45b7af

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

shlwapi

gdi32

ntdll

Exports

Exports

Sections

.text Size: 38KB - Virtual size: 38KB

.data Size: 12KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 38KB - Virtual size: 38KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB