918bd04b76fca8c8964c10a1bea1c8881a3967689d66811c8a63601556eeca6d

Sharing

Copy URL Twitter E-mail

General

Target

918bd04b76fca8c8964c10a1bea1c8881a3967689d66811c8a63601556eeca6d
Size

45KB
MD5

6967a3d582e2e6c6b149513ad4e570b8
SHA1

0542a20a806734165d70fbe3fdad8d3e5abb8ab7
SHA256

918bd04b76fca8c8964c10a1bea1c8881a3967689d66811c8a63601556eeca6d
SHA512

6737fbf53cc4c882d9211dfcf3e62bb7c3531b49b5e40f513c616531407f28a575aea910f7b046d07a2358cb538a113c0f4055b38a3008389c03316266f24479
SSDEEP

768:mI/KXKJB7SoGn40RKqxvyyisifGcPBH3xft0ifq4iqqTqeitqjRd/3:XUKJZSoL0lByyCVPt3b0ipVqTqeikjT/

Score

N/A

Malware Config

Signatures

Files

918bd04b76fca8c8964c10a1bea1c8881a3967689d66811c8a63601556eeca6d
.dll windows x86

4f19c7b1955caa0c9c4891baef01c384

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentThreadId
ReadProcessMemory
InterlockedIncrement
GetFullPathNameW
SetThreadPriority
VirtualAlloc
DuplicateHandle
GetTickCount
WritePrivateProfileSectionW
lstrcpyW
LeaveCriticalSection
SetPriorityClass
CreateEventW
UnmapViewOfFile
CompareStringW
RaiseException
WriteFile
lstrcpynA
GetProcessHeap
TerminateProcess
CompareStringA
CreateSemaphoreA
CloseHandle
SetEvent
GetFileSize
RemoveDirectoryA
GetVersion
GetPrivateProfileStringW
GetStringTypeExA
CreateThread
HeapAlloc

ntdll

NtCreateWaitablePort
ZwFlushVirtualMemory
ZwDeleteValueKey
ZwDeleteKey
NtOpenEvent
ZwDebugActiveProcess
ZwGetDevicePowerState
NtCreateSymbolicLinkObject
ZwOpenEventPair

Exports

Exports

CreateProcessNotify
InternalSetTcpEntry
GetRTTAndHopCount
GetAdapterIndex
DllClientCleanup
psrDate
Icmp6SendEcho2
GetAdaptersInfo
DllClientStartup
GetIcmpStatistics
DeleteProxyArpEntry
Icmp6ParseReplies
SetTcpEntry
InternalSetIpForwardEntry
GetIpAddrTable
NTTimeToNTPTime
NTPTimeToNTFileTime
EnableRouter
InternalSetIpNetEntry
GetIpForwardTable
GetBestInterface
UnenableRouter
GetPerAdapterInfo
RestoreMediaSense
DeleteIPAddress
InternalGetIpForwardTable
GetAdaptersAddresses
NhGetInterfaceNameFromGuid
GetExtendedTcpTable
InternalGetUdpTable
GetTcpStatisticsEx
IpReleaseAddress
InternalDeleteIpForwardEntry
GetInterfaceInfo
GetAdapterOrderMap
GetIpErrorString
IcmpCloseHandle
GetNetworkParams
DisableMediaSense
InternalDeleteIpNetEntry
CreateIpForwardEntry
NhGetInterfaceNameFromDeviceGuid
GetIpStatistics
GetOwnerModuleFromTcp6Entry
SetAdapterIpAddress
AddIPAddress
NotifyRouteChange
GetIcmpStatisticsEx
GetOwnerModuleFromUdp6Entry
SetIfEntry
CancelIPChangeNotify
InternalSetIpStats
GetTcpTable
GetIfTable
GetTcpStatistics
GetUdpTable
GetIpNetTable
GetUdpStatisticsEx
GetExtendedUdpTable
register_icmp
GetUdpStatistics
NotifyAddrChange
IcmpSendEcho
AllocateAndGetIpAddrTableFromStack
GetBestInterfaceEx
GetNumberOfInterfaces
SetIpNetEntry
DeleteIpNetEntry
CreateProxyArpEntry
SetIpTTL
InternalGetIfTable
InternalGetIpNetTable
SendARP
InternalGetTcpTable
GetOwnerModuleFromUdpEntry
do_echo_rep
InternalCreateIpForwardEntry
GetIfEntry
CreateIpNetEntry
NhGetGuidFromInterfaceName
SetIpForwardEntry
IpRenewAddress

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f19c7b1955caa0c9c4891baef01c384

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 309B

.rsrc Size: 33KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 309B

.rsrc
Size: 33KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 4KB