cc253039139bf7ced23d2a7bb89b3e1134767a219acf370e5066bb747e6ba5f1

Sharing

Copy URL

Twitter E-mail

General

Target

cc253039139bf7ced23d2a7bb89b3e1134767a219acf370e5066bb747e6ba5f1
Size

61KB
MD5

2212d1c54edc5cc899fb93d62842bb92
SHA1

65449afe27e2092b745f4989c7ee855c078402af
SHA256

cc253039139bf7ced23d2a7bb89b3e1134767a219acf370e5066bb747e6ba5f1
SHA512

fb968634f56f1d1ca50b1ee4ec21c97e542979ac2c68ebb2433497f4cd3b53f3b413ad3156bb4f96d383386960452aa1dff9171c16270fcf2dd0902759353d74
SSDEEP

1536:HAFQDeeYmz9gGdiFU6bE6CCs8e8dw/99sWBusJ2yVirQho:g8eeR9TdiFzEQs8/dwFKI2yVirQa

Score

N/A

Malware Config

Signatures

Files

cc253039139bf7ced23d2a7bb89b3e1134767a219acf370e5066bb747e6ba5f1
.dll windows x86

d8e17b3f0267eb20ddad678b75d0d2df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kbdrvr32

FindLongProperty
SetPropertyParameterBlock
FindMultiSzProperty
GetResourceDependency
GetAllProperties
GetDwordValue
GetPropertiesToParameterBlock
FindDwordProperty

advapi32

GetLengthSid
ReportEventW
StartTraceW
ConvertStringSidToSidW

ntdll

NtCreateTimer
NtQuerySection
RtlExitUserThread
ZwQueryInformationToken
RtlCreateTimer

kernel32

RemoveDirectoryW
WideCharToMultiByte
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
CloseHandle
ReleaseMutex
EnterCriticalSection
InterlockedDecrement
OpenProcess
GetSystemDirectoryW
HeapAlloc
CreateFileMappingA
MapViewOfFile

Exports

Exports

CancelUnimodemTimer
CallBeginning
CreateProcesslotify
OpenAppRegEnum
UpdateFromAppChange
OpenComponentLibraryEx
SetupSave
StopMonitorThread
SetUnimodemTimer
UmPlatformInitialize
DowngradeAPL
SyncDeviceIoControl
StopMonitoringHandle
SetActionEnum
FreeUnimodemTimer
GetCatalogObject2
SetSetupSave
InprocServer32FromString
OpenComponentLibraryOnMemEx
MonitorHandle
SetSetupOpen
UpdateFromComponentChange
SetActionLogMode
AppRegEnum
ExecuteAction
ServerGetApplicationType
SetActionLogFile
GetGlobalBabyJITEnabled
SetupOpen
ReinitOverStruct
SetSilent
GetSimpleTableDispenser

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8e17b3f0267eb20ddad678b75d0d2df

Headers

DLL Characteristics

File Characteristics

Imports

kbdrvr32

advapi32

ntdll

kernel32

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 47KB

.data Size: 11KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 47KB - Virtual size: 47KB

.data
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB