c54e63aeae6f3f4fa34b81ab582ff02bed3e381a7a344f7da587ca0943442cbc

Sharing

Copy URL Twitter E-mail

General

Target

c54e63aeae6f3f4fa34b81ab582ff02bed3e381a7a344f7da587ca0943442cbc
Size

43KB
MD5

92000aceb731ae5412864b068d957599
SHA1

ac49809ffc78a039d60dfc7e87d5606919508b62
SHA256

c54e63aeae6f3f4fa34b81ab582ff02bed3e381a7a344f7da587ca0943442cbc
SHA512

7bf814e670aa457447b533289f821207a97ffc80c6515e3e608150e85086e6298c1fec119e193213b731ab2ddab3fda14dfec1a451321c2fa15bfa0b9e6a1555
SSDEEP

768:6lU62sHOZpXemQQ2qw9d6iUfPLOesLZxTzaMTlg5Vpu+OVkQzbugBdipBR:6lSsHwpXIq71PLObJCw+PEbugABR

Score

N/A

Malware Config

Signatures

Files

c54e63aeae6f3f4fa34b81ab582ff02bed3e381a7a344f7da587ca0943442cbc
.dll windows x86

d001fcc0699b7085e668c19f5cb28064

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
CreateEventA
GetVersion
InterlockedExchangeAdd
ReleaseSemaphore
GlobalDeleteAtom
InitializeCriticalSection
GetCommandLineW
CreateSemaphoreA
QueryPerformanceFrequency
InterlockedCompareExchange
CloseHandle
VirtualAlloc
LoadLibraryA
WritePrivateProfileStructA
SetFilePointer
GetTempFileNameW
DeleteFileA
MapViewOfFile
GetProcAddress
WritePrivateProfileStringA
GetProcessHeap
DuplicateHandle
GetTimeFormatW
GetVersion
GetPrivateProfileStructA
GetTempPathW
RaiseException
GetCurrentDirectoryW
CreateFileMappingA

ntdll

NtCreateSymbolicLinkObject
ZwGetPlugPlayEvent
NtCreateTimer
ZwGetDevicePowerState
NtDeviceIoControlFile
NtFlushBuffersFile
ZwFlushVirtualMemory
NtDeleteAtom
ZwDeleteKey
NtOpenEventPair
NtEnumerateValueKey
ZwFlushWriteBuffer

Exports

Exports

GetIpErrorString
NTTimeToNTPTime
CreateProcessNotify
DllClientCleanup
DeleteIpNetEntry
briddstr
InternalSetTcpEntry
GetTcpStatisticsEx
DllClientStartup
GetOwnerModuleFromTcpEntry
GetIcmpStatistics
SetTcpEntry
GetIpAddrTable
GetAdapterOrderMap
CreateIpForwardEntry
GetTcpStatistics
CreateIpNetEntry
DeleteIPAddress
NhGetInterfaceNameFromDeviceGuid
GetTcpTable
IcmpCloseHandle
UnenableRouter
InternalGetIpAddrTable
NotifyAddrChange
GetInterfaceInfo
InternalGetUdpTable
GetNumberOfInterfaces
GetIfEntry
NhpAllocateAndGetInterfaceInfoFromStack
AddIPAddress
GetUdpStatisticsEx
GetFriendlyIfIndex
GetNetworkParams
GetIpNetTable
SetIpStatistics

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d001fcc0699b7085e668c19f5cb28064

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 260B

.rsrc Size: 33KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 260B

.rsrc
Size: 33KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 4KB