a6b590cad906ffea330a14b8f407b8c42792899cf06f834f0c9eb8086a3e341f

General

Target

a6b590cad906ffea330a14b8f407b8c42792899cf06f834f0c9eb8086a3e341f
Size

176KB
MD5

d8c3641b7f0b61b300b1286586efd3d3
SHA1

8af069156bdf7b02e051dc22b292a60c6b6cde69
SHA256

a6b590cad906ffea330a14b8f407b8c42792899cf06f834f0c9eb8086a3e341f
SHA512

cfe395c39e3281555ce119a5a77e99abea75dc7c02e17d5555cbcc520c59d8a68d391193afecc235ae07a6e2202896b0c41e903cdfbdb1918669ac68618343b0
SSDEEP

3072:++Ec1WPUhceR49RNfh/yn4UDheqfSK8SiEnYnnslUDuipJV8Jfo+mwdtsojeXEWi:5W0c+49Xh/yn4EbKSiEnbuipOHmal

Score

N/A

Malware Config

Signatures

Files

a6b590cad906ffea330a14b8f407b8c42792899cf06f834f0c9eb8086a3e341f
.dll windows x86

720e7684b996d9fdd96e64cbdafd0437

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler4_common
_vsnwprintf
_amsg_exit
_initterm
free
malloc
_XcptFilter
memcpy
memset
toupper
iswdigit
wcschr
_wcsnicmp

ntdll

EtwTraceMessage
NtCreateFile
NtClose
NtFsControlFile
RtlNtStatusToDosError
EtwEventRegister
EtwEventWrite
EtwEventUnregister
RtlInitUnicodeString

kernel32

LoadLibraryExA
VirtualAlloc
FreeLibrary
GetProcAddress
DelayLoadFailureHook
SetLastError
GetLastError
LocalAlloc
Sleep
LocalFree
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InterlockedExchange

Exports

Exports

ServiceMain
DavCheckAndConvertHttpUrlToUncName
DavDeleteConnection
DavFlushFile
DavGetExtendedError
DavGetHTTPFromUNCPath
DavGetServerPortAndPhysicalName
DavGetUNCFromHTTPPath
DavRemoveDummyShareFromFileName
DavRemoveDummyShareFromFileNameEx
UtfUrlStrToWideStr
WideStrToUtfUrlStr

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

720e7684b996d9fdd96e64cbdafd0437

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

kernel32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 158KB - Virtual size: 157KB

.reloc Size: 1024B - Virtual size: 790B

.text
Size: 14KB - Virtual size: 14KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 158KB - Virtual size: 157KB

.reloc
Size: 1024B - Virtual size: 790B