f64f384a40e289b9b1fa68b7e1d49fba79bd299c2c23ebda79e3e0268134b983

Sharing

Copy URL Twitter E-mail

General

Target

f64f384a40e289b9b1fa68b7e1d49fba79bd299c2c23ebda79e3e0268134b983
Size

208KB
MD5

ca7a9d86e5ca043ec4421048f8668533
SHA1

baed283d70b8c97009c49f69061968752308a5ba
SHA256

f64f384a40e289b9b1fa68b7e1d49fba79bd299c2c23ebda79e3e0268134b983
SHA512

f6c0a8f6c4cd88b76dc3a0a14a18af526788e3ec0601db20238f8bda14ccdf189bc9c7dc124cfccda7d666c3d0af46061556e782dd48a9d982f8f0a0b59293a6
SSDEEP

3072:QD6kD7CdLOyfqmRFkMuR6PISt5c9MLzder70xJwhS2QBX3W:QD6kDmRqCFkiv29MFef0X6S2Qo

Score

N/A

Malware Config

Signatures

Files

f64f384a40e289b9b1fa68b7e1d49fba79bd299c2c23ebda79e3e0268134b983
.dll windows x86

b0525bc5cc843edc6851fda8bfbab527

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
atoi
wcscpy
strtok

ntdll

RtlDeleteResource
RtlInitializeResource
RtlAcquireResourceShared
RtlReleaseResource
RtlAcquireResourceExclusive

advapi32

RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExW
RegSetValueExW

iphlpapi

InternalSetIpNetEntry
GetIcmpStatistics
GetTcpStatisticsEx
InternalSetTcpEntry
GetUdpStatistics
InternalDeleteIpForwardEntry
InternalCreateIpForwardEntry
InternalSetIpForwardEntry
InternalCreateIpNetEntry
InternalDeleteIpNetEntry
InternalSetIpStats
GetIpStatistics
AllocateAndGetUdpExTableFromStack
InternalGetUdpTable
AllocateAndGetTcpExTableFromStack
InternalGetTcpTable
InternalGetIpForwardTable
InternalGetIpNetTable
InternalGetIpAddrTable
InternalGetIfTable
InternalSetIfEntry

kernel32

TerminateProcess
GetCurrentProcess
GetCurrentProcessId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapCreate
HeapDestroy
GetCurrentThreadId
CloseHandle
GetSystemTimeAsFileTime
QueryPerformanceCounter
HeapAlloc
GetLastError
GetComputerNameA
HeapFree
CreateWaitableTimerA
SetWaitableTimer
DisableThreadLibraryCalls
GetTickCount

snmpapi

SnmpUtilMemAlloc
SnmpUtilOidFree
SnmpSvcGetUptimeFromTime
SnmpUtilMemFree
SnmpSvcGetUptime
SnmpUtilOidCpy
SnmpTfxOpen
SnmpTfxQuery
SnmpSvcGetEnterpriseOID

wsock32

htonl
htons
ntohs

Exports

Exports

Mib2DLLEntry
SnmpExtensionInit
SnmpExtensionInitEx
SnmpExtensionQuery
SnmpExtensionTrap

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0525bc5cc843edc6851fda8bfbab527

Headers

File Characteristics

Imports

msvcrt

ntdll

advapi32

iphlpapi

kernel32

snmpapi

wsock32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.data Size: 184KB - Virtual size: 184KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.data
Size: 184KB - Virtual size: 184KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB