a79df094b8c318c69d1ba4a9a3916e23f807c5fcd190c4ebefb7615f49b1dfc5

Sharing

Copy URL

Twitter E-mail

General

Target

a79df094b8c318c69d1ba4a9a3916e23f807c5fcd190c4ebefb7615f49b1dfc5
Size

51KB
MD5

cde51a17eb7acab99395803c65cece7f
SHA1

fa28e850fe4f04aa11f9df4132c4bdd1609d8114
SHA256

a79df094b8c318c69d1ba4a9a3916e23f807c5fcd190c4ebefb7615f49b1dfc5
SHA512

e49fb5604355aae3d7ffa242fa8997eb5ef2bae44f758b6f979895067095cd7147c34bedb25367da6e549efd609fd09d0b65689fa51c60165099410073ace73d
SSDEEP

1536:6TpBP+ZTM8xRgLPjWg90BL/mkJ8BOpIBHu/gcin9:6Ty68xRqPjWLL+kCLR0gci

Score

N/A

Malware Config

Signatures

Files

a79df094b8c318c69d1ba4a9a3916e23f807c5fcd190c4ebefb7615f49b1dfc5
.dll windows x86

5b599bc8d707bdd481c49a2905f92728

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

ZwFlushVirtualMemory
NtOpenMutant
ZwFlushKey

shlwapi

PathIsRelativeW
PathAppendA
PathFileExistsW
StrToIntW
ord29
StrToIntExW
PathCanonicalizeW
PathStripPathW

kernel32

GlobalDeleteAtom
FreeResource
LocalAlloc
SetUnhandledExceptionFilter
InterlockedIncrement
CloseHandle
FindFirstFileA
GetStringTypeExA
GlobalUnlock
GetLastError
GetVersionExW
InterlockedIncrement
VirtualAlloc
LocalFree

gdi32

GetNearestColor
GetDeviceCaps
SetPixel
CombineRgn

user32

LoadAcceleratorsA
SendMessageTimeoutA
LoadIconA
ShowCursor
ReplyMessage
GetWindowThreadProcessId
EnumThreadWindows
GetDlgItemTextW
DialogBoxParamW
BringWindowToTop
GetSysColorBrush
SendMessageCallbackA
SystemParametersInfoW
MessageBoxW
GetMenuStringW
SetWindowTextW
ChildWindowFromPoint
FillRect
CharPrevA
DialogBoxIndirectParamW
SetCapture
GetClassInfoW

Exports

Exports

IpReleaseAddress
CreateProcessNotify
DllClientCleanup
GetOwnerModuleFromUdpEntry
IcmpCreateFile
NhGetInterfaceNameFromGuid
SetIpStatistics
pathrcfg
GetIcmpStatisticsEx
RestoreMediaSense
CreateIpNetEntry
DllClientStartup
DisableMediaSense
GetNetworkParams
do_echo_rep
InternalGetIfTable
DeleteProxyArpEntry
SetAdapterIpAddress
InternalSetTcpEntry
GetBestInterface
InternalCreateIpForwardEntry
NhpAllocateAndGetInterfaceInfoFromStack
IcmpSendEcho2
GetUdpStatisticsEx
NhGetGuidFromInterfaceName
AddIPAddress
DeleteIPAddress
Icmp6SendEcho2
SetIpForwardEntry
DeleteIpForwardEntry
GetNumberOfInterfaces
InternalDeleteIpNetEntry
InternalGetIpAddrTable
IcmpParseReplies
GetIpStatistics
SetTcpEntry
NTPTimeToNTFileTime
GetExtendedUdpTable
Icmp6CreateFile
InternalGetUdpTable
SetIpNetEntry
InternalSetIpStats
GetTcpTable
InternalSetIfEntry
GetUdpStatistics
GetIpAddrTable
IpRenewAddress
EnableRouter
AllocateAndGetIpAddrTableFromStack
do_echo_req
UnenableRouter
GetBestRoute
InternalGetTcpTable
GetAdaptersAddresses
InternalDeleteIpForwardEntry
SetIpTTL
GetAdapterIndex
NotifyAddrChange
SetIfEntry
GetIpNetTable
CancelIPChangeNotify
GetIpStatisticsEx
SendARP
InternalGetIpForwardTable
GetAdaptersInfo
register_icmp
NTTimeToNTPTime
GetPerAdapterInfo
GetFriendlyIfIndex
GetAdapterOrderMap
GetIfTable
GetInterfaceInfo
NhGetInterfaceNameFromDeviceGuid
FlushIpNetTable
InternalSetIpNetEntry
IcmpSendEcho
GetOwnerModuleFromTcpEntry
GetExtendedTcpTable
IcmpCloseHandle
GetRTTAndHopCount
GetIpErrorString
GetBestInterfaceEx

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b599bc8d707bdd481c49a2905f92728

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

shlwapi

kernel32

gdi32

user32

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 39KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 39KB - Virtual size: 39KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB