b41efc3cddd2370f2cd25609a7f25f3a9981b6a139947de05e9f6267fbf6e31d

Sharing

Copy URL Twitter E-mail

General

Target

b41efc3cddd2370f2cd25609a7f25f3a9981b6a139947de05e9f6267fbf6e31d
Size

51KB
MD5

025bb807f0eaba518141cb1e85eb2d9a
SHA1

f72a8e6166876a1faf6d7381a58ea0bb30a49a3e
SHA256

b41efc3cddd2370f2cd25609a7f25f3a9981b6a139947de05e9f6267fbf6e31d
SHA512

f2828d0769ff5258221873cd38b2dff3397a784856016390b6df813d62073b9f6819ba56530109ac65d1611aa9622f5b6afa923b0167c1944e63fcdd94625f92
SSDEEP

1536:6TpBP+ZTM8xRgLPjWg90BL/mkJ8BOpIBHu0gcin9:6Ty68xRqPjWLL+kCLRfgci

Score

N/A

Malware Config

Signatures

Files

b41efc3cddd2370f2cd25609a7f25f3a9981b6a139947de05e9f6267fbf6e31d
.dll windows x86

5b599bc8d707bdd481c49a2905f92728

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

ZwFlushVirtualMemory
NtOpenMutant
ZwFlushKey

shlwapi

PathIsRelativeW
PathAppendA
PathFileExistsW
StrToIntW
ord29
StrToIntExW
PathCanonicalizeW
PathStripPathW

kernel32

GlobalDeleteAtom
FreeResource
LocalAlloc
SetUnhandledExceptionFilter
InterlockedIncrement
CloseHandle
FindFirstFileA
GetStringTypeExA
GlobalUnlock
GetLastError
GetVersionExW
InterlockedIncrement
VirtualAlloc
LocalFree

gdi32

GetNearestColor
GetDeviceCaps
SetPixel
CombineRgn

user32

LoadAcceleratorsA
SendMessageTimeoutA
LoadIconA
ShowCursor
ReplyMessage
GetWindowThreadProcessId
EnumThreadWindows
GetDlgItemTextW
DialogBoxParamW
BringWindowToTop
GetSysColorBrush
SendMessageCallbackA
SystemParametersInfoW
MessageBoxW
GetMenuStringW
SetWindowTextW
ChildWindowFromPoint
FillRect
CharPrevA
DialogBoxIndirectParamW
SetCapture
GetClassInfoW

Exports

Exports

IpReleaseAddress
CreateProcessNotify
DllClientCleanup
GetOwnerModuleFromUdpEntry
IcmpCreateFile
NhGetInterfaceNameFromGuid
SetIpStatistics
chkdjava
GetIcmpStatisticsEx
RestoreMediaSense
CreateIpNetEntry
DllClientStartup
DisableMediaSense
GetNetworkParams
do_echo_rep
InternalGetIfTable
DeleteProxyArpEntry
SetAdapterIpAddress
InternalSetTcpEntry
GetBestInterface
InternalCreateIpForwardEntry
NhpAllocateAndGetInterfaceInfoFromStack
IcmpSendEcho2
GetUdpStatisticsEx
NhGetGuidFromInterfaceName
AddIPAddress
DeleteIPAddress
Icmp6SendEcho2
SetIpForwardEntry
DeleteIpForwardEntry
GetNumberOfInterfaces
InternalDeleteIpNetEntry
InternalGetIpAddrTable
IcmpParseReplies
GetIpStatistics
SetTcpEntry
NTPTimeToNTFileTime
GetExtendedUdpTable
Icmp6CreateFile
InternalGetUdpTable
SetIpNetEntry
InternalSetIpStats
GetTcpTable
InternalSetIfEntry
GetUdpStatistics
GetIpAddrTable
IpRenewAddress
EnableRouter
AllocateAndGetIpAddrTableFromStack
do_echo_req
UnenableRouter
GetBestRoute
InternalGetTcpTable
GetAdaptersAddresses
InternalDeleteIpForwardEntry
SetIpTTL
GetAdapterIndex
NotifyAddrChange
SetIfEntry
GetIpNetTable
CancelIPChangeNotify
GetIpStatisticsEx
SendARP
InternalGetIpForwardTable
GetAdaptersInfo
register_icmp
NTTimeToNTPTime
GetPerAdapterInfo
GetFriendlyIfIndex
GetAdapterOrderMap
GetIfTable
GetInterfaceInfo
NhGetInterfaceNameFromDeviceGuid
FlushIpNetTable
InternalSetIpNetEntry
IcmpSendEcho
GetOwnerModuleFromTcpEntry
GetExtendedTcpTable
IcmpCloseHandle
GetRTTAndHopCount
GetIpErrorString
GetBestInterfaceEx

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b599bc8d707bdd481c49a2905f92728

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

shlwapi

kernel32

gdi32

user32

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 39KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 39KB - Virtual size: 39KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB