1a0bc11e5ca663473473d959429eb9476f8dd251bdcb9c97f2aa8e0956450a06

Sharing

Copy URL

Twitter E-mail

General

Target

1a0bc11e5ca663473473d959429eb9476f8dd251bdcb9c97f2aa8e0956450a06
Size

112KB
MD5

8d7089ae23f84fe2fc1ffc90c430b1b0
SHA1

50071e039fcfbfbd69ae8cb8312951a0a6ad82bd
SHA256

1a0bc11e5ca663473473d959429eb9476f8dd251bdcb9c97f2aa8e0956450a06
SHA512

420d92b1bfb015174ff986ccab0c6411ffd99082ed8e671122d9be2a282e192b1372c2d21a7c6db77b26fc46af94d8fc50bebc8d34a1265a642f11dc745f22e9
SSDEEP

1536:hbWwevgc24G8+EsGCVY2NPss4Ak2c5iEnUBQZTr9yEWYn/3:hDevgZ8bqPss4Ak2c5isUu9nTnv

Score

N/A

Malware Config

Signatures

Files

1a0bc11e5ca663473473d959429eb9476f8dd251bdcb9c97f2aa8e0956450a06
.dll windows x86

df2237898675df23756d6e16c6c37ff3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pmcasn

?pmc_create_asn_value@@YAPAVIPmcAsnValue@@W4EAsnType@NPmcAsnValue@@PAW4ECode@NPmcResult@@@Z
?pmc_create_asn_value@@YAPAVIPmcAsnValue@@PBDW4EAsnType@NPmcAsnValue@@PAW4ECode@NPmcResult@@@Z
?pmc_create_asn_object_id@@YAPAVIPmcAsnObjectID@@PAW4ECode@NPmcResult@@@Z
?pmc_create_asn_value@@YAPAVIPmcAsnValue@@JW4EAsnType@NPmcAsnValue@@PAW4ECode@NPmcResult@@@Z

msvcrt

??2@YAPAXI@Z
_onexit
__CxxFrameHandler
__dllonexit
_purecall
free
_initterm
malloc
strncmp
??3@YAXPAX@Z
_adjust_fdiv
abort
realloc

kernel32

InterlockedIncrement
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls

pmcsock

ord3
ord4
ord2

pmccomn

?get@CPmcSemaphore@@QAE?AW4EResult@1@K@Z
??1CPmcCriticalSection@@QAE@XZ
?release@CPmcSemaphore@@QAE_NJ@Z
??1CPmcSemaphore@@QAE@XZ
??0CPmcSemaphore@@QAE@JJ@Z

pmccomnf

?suspend@CPmcThread@@UAEXXZ
?stop@CPmcThread@@UAEXXZ
?get_status@CPmcThread@@UAE?AW4Status@IPmcThread@@XZ
?get_runnable@CPmcThread@@UAEPAVIPmcRunnable@@XZ
?get_destroy_type@CPmcThread@@UAE?AW4Type@IPmcThread@@XZ
??1CPmcThread@@MAE@XZ
?_initialize@CPmcThread@@IAE?AW4ECode@NPmcResult@@PAVIPmcRunnable@@W4Type@IPmcThread@@@Z
?is_cancelation@CPmcThread@@IAE_NXZ
?resume@CPmcThread@@UAEXXZ
?start@CPmcThread@@UAEXXZ
??0CPmcThread@@IAE@XZ

Exports

Exports

pms_create_pdu
pms_create_pdu_list
pms_create_raw_packet
pms_create_snmp_c_target
pms_create_snmp_packet
pms_create_snmp_packet_list
pms_create_snmp_request_session
pms_create_snmp_target
pms_create_snmp_trap_session
pms_create_var_bind
pms_create_var_bind_list
pms_get_snmp_translator

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df2237898675df23756d6e16c6c37ff3

Headers

File Characteristics

Imports

pmcasn

msvcrt

kernel32

pmcsock

pmccomn

pmccomnf

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 56KB - Virtual size: 52KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 56KB - Virtual size: 52KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 2KB