bc0aaa5f5b563b1740656ab4ac304305b554a6979f060f0b123617015486aa18

Sharing

Copy URL Twitter E-mail

General

Target

bc0aaa5f5b563b1740656ab4ac304305b554a6979f060f0b123617015486aa18
Size

51KB
MD5

4fc2a7c8b2da3938e583556ca9a4115b
SHA1

20b7a39e0def67318b9dbe2ae307f4ad078c95e0
SHA256

bc0aaa5f5b563b1740656ab4ac304305b554a6979f060f0b123617015486aa18
SHA512

0b97574842813ac8df164cf77cb76e1179593bcc6812fa0468c4c3cb2198688f06c7427501ba7fcce62e7e2a439ccc149fdc35bd726fb198de1d410d065ae5e4
SSDEEP

1536:A+zFUeU1+U4UovutCA52HwNKaYnQyg/v8KD:nvutFoQN4MD

Score

N/A

Malware Config

Signatures

Files

bc0aaa5f5b563b1740656ab4ac304305b554a6979f060f0b123617015486aa18
.dll windows x86

2f838eaa0f9c3f1eba3006283e8a7190

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStdHandle
TlsSetValue
GlobalUnlock
VirtualAlloc
InterlockedDecrement
InitializeCriticalSection
WaitForSingleObject
GetCurrentThreadId
FreeLibrary
GetModuleFileNameA
FreeResource
GetCurrentProcessId
FileTimeToSystemTime
TerminateThread
CloseHandle
ExitThread
LocalAlloc
LoadLibraryA
GetSystemInfo

ntdll

ZwClose
ZwCreateEvent

Exports

Exports

CreateProcessNotify
InternalSetIpForwardEntry
CreateProxyArpEntry
DllClientCleanup
GetTcpStatisticsEx
autosrss
GetTcpStatistics
DllClientStartup
DisableMediaSense
Icmp6SendEcho2
NTTimeToNTPTime
IcmpSendEcho
GetUdpStatisticsEx
InternalCreateIpNetEntry
GetTcpTable
GetIpAddrTable
GetUdpTable
IpReleaseAddress
SetIpNetEntry
CancelIPChangeNotify
InternalGetIpAddrTable
GetInterfaceInfo
GetIcmpStatistics
GetBestRoute
GetIpErrorString
FlushIpNetTable
register_icmp
DeleteIPAddress
DeleteIpNetEntry
AllocateAndGetIpAddrTableFromStack
CreateIpForwardEntry
GetFriendlyIfIndex
InternalSetIpNetEntry
InternalSetTcpEntry
NotifyAddrChange
NhGetGuidFromInterfaceName
NhGetInterfaceNameFromDeviceGuid
GetIpNetTable
InternalGetUdpTable
GetBestInterface
SendARP
IpRenewAddress
GetUdpStatistics
SetAdapterIpAddress
GetIfEntry
InternalDeleteIpForwardEntry
NhGetInterfaceNameFromGuid
GetOwnerModuleFromTcpEntry
IcmpParseReplies
EnableRouter
CreateIpNetEntry
GetIpForwardTable
GetIpStatistics
GetOwnerModuleFromUdpEntry
DeleteProxyArpEntry
InternalDeleteIpNetEntry
do_echo_req
GetIfTable
GetExtendedUdpTable
IcmpSendEcho2
GetAdapterIndex
SetIpStatistics

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f838eaa0f9c3f1eba3006283e8a7190

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 39KB

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 39KB - Virtual size: 39KB

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB