cadd72d74bdcb24f9b6dca465f8280b295f9009505c351e52bbaf28b01f091fd

General

Target

cadd72d74bdcb24f9b6dca465f8280b295f9009505c351e52bbaf28b01f091fd
Size

192KB
MD5

c568ae6b20d4fa4843ee018bb190822b
SHA1

3eb402b6d39d543ab652844318bc33557612e034
SHA256

cadd72d74bdcb24f9b6dca465f8280b295f9009505c351e52bbaf28b01f091fd
SHA512

ec0e7ba812423d6b70b45a16292ae56872bebfe35a485847bd1695cebbcc39fc7513a113d0fccc4793ec100c487bcf2180e71a8686dc8ab7c6b14013aa1b498c
SSDEEP

3072:HpF8amJjL96eAEIN3Xr0RBuqdcX0AT5OId1OF+MUeBjQWT33jmQnWcPfU82:JFsjLqEKX/iRa5OkPr2jK2WcPc8

Score

N/A

Malware Config

Signatures

Files

cadd72d74bdcb24f9b6dca465f8280b295f9009505c351e52bbaf28b01f091fd
.dll windows x86

d954fdfc8ac5b13f991654dd0a095ebc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_initterm
strchr
strtoul
calloc
strncpy
free
malloc
_stricmp
_vsnprintf

wsock32

getservbyport
ntohs
gethostbyaddr
htons
WSASetLastError
htonl
inet_addr
gethostbyname
WSAGetLastError
getservbyname
ioctlsocket

kernel32

LeaveCriticalSection
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
FormatMessageA
GetSystemDirectoryA
OutputDebugStringA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess

winspool.drv

GetPrinterDriverDirectoryA

Exports

Exports

SNMPExit
SNMPGet
SNMPGetConfig
SNMPGetMulti
SNMPGetNext
SNMPGetNextMulti
SNMPInit
SNMPSet
SNMPSetConfig
SNMPSetMulti
SNMP_startup
SOID2OID
SnmpDecode
SnmpEncode
XPORTFillAddrPts
_SNMPCommandMulti@12

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d954fdfc8ac5b13f991654dd0a095ebc

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

wsock32

kernel32

winspool.drv

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.data Size: 172KB - Virtual size: 176KB

.rsrc Size: 1024B - Virtual size: 936B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.data
Size: 172KB - Virtual size: 176KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 1KB - Virtual size: 1KB