39cf3f887e9371588a1fc36bc9e06e987bac01d1cf9cb657de454f9d1c84bf62

General

Target

39cf3f887e9371588a1fc36bc9e06e987bac01d1cf9cb657de454f9d1c84bf62
Size

104KB
MD5

4c1b13e49aee27bf3571310d38e202bb
SHA1

a28b7d32a6c4a1caf7dd8265589570883af5e561
SHA256

39cf3f887e9371588a1fc36bc9e06e987bac01d1cf9cb657de454f9d1c84bf62
SHA512

f4061eb005ff7f5a3e8ec60909dc07697a290bc505edbc234a2de9f16233bf05fa211b0a37e3b0fd31116a7ba99b8851e96b7b1e5afad71a6ca5ab25682132d9
SSDEEP

1536:/vqBNB6rHcBNcni0S0GUhsW2IEObyPLQIW2tg12XQ21KcGVhFIQoL:ni6qV0SOdesIWQVZ0tvEL

Score

N/A

Malware Config

Signatures

Files

39cf3f887e9371588a1fc36bc9e06e987bac01d1cf9cb657de454f9d1c84bf62
.dll windows x86

34f480ab385ef48b4ad0519dbabcabe7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
ExitProcess
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter

user32

CharNextA
GetSystemMetrics
SetWindowsHookExA
SendMessageTimeoutA
CallNextHookEx
UnhookWindowsHookEx

msvcp71

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Nomemory@std@@YAXXZ

msvcr71

_adjust_fdiv
__security_error_handler
?terminate@@YAXXZ
__CppXcptFilter
_except_handler3
_stricmp
??0exception@@QAE@XZ
??1exception@@UAE@XZ
??3@YAXPAX@Z
??0exception@@QAE@ABV0@@Z
_CxxThrowException
memmove
__CxxFrameHandler
_purecall
malloc
free
realloc
strchr
_callnewh
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_putenv

Exports

Exports

RMACreateInstance
RMAShutdown
SetDLLAccessPath

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34f480ab385ef48b4ad0519dbabcabe7

Headers

File Characteristics

Imports

kernel32

user32

msvcp71

msvcr71

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 56KB - Virtual size: 52KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 56KB - Virtual size: 52KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 2KB