6ac0625d808f2a1eb9c578a78d336fe2a4f3bf6c63cd1595ab9038148c094c88

Sharing

Copy URL Twitter E-mail

General

Target

6ac0625d808f2a1eb9c578a78d336fe2a4f3bf6c63cd1595ab9038148c094c88
Size

160KB
MD5

865c2f043b7e7e7855857b05cfd24d56
SHA1

9fd6f6ec1e53b74cf6035e3ca64f6e9107a29c94
SHA256

6ac0625d808f2a1eb9c578a78d336fe2a4f3bf6c63cd1595ab9038148c094c88
SHA512

ff8e02596569a5aa3a92112998e893dac85d89a0fa9962dc7471fcc84eca1d942a89b5b17a5a1729c39e5c4bf53db50aee9a40d6c4d017f2670ec8ac91bd60e2
SSDEEP

3072:PdBqwpXJ8pVoVn79/c+Nr3QlIZpMUg7MUGYC+47GWR:Gwp5W87Rc+xAq6MUGYC+47GW

Score

N/A

Malware Config

Signatures

Files

6ac0625d808f2a1eb9c578a78d336fe2a4f3bf6c63cd1595ab9038148c094c88
.dll windows x86

4da2c5971f6c4383cd03c7cf956e85ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
VirtualAlloc
GetThreadLocale
DisableThreadLibraryCalls

msvcr71

memmove
strncpy
getenv
sprintf
printf
strstr
strncmp
malloc
strchr
toupper
_searchenv
tolower
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
__dllonexit
_onexit
free
_strnicmp

Exports

Exports

nlsAddBuffer
nlsAppendString
nlsCharToLChar
nlsClose
nlsCloseDBLocale
nlsCompare
nlsCompareN
nlsConvertFromUCS2
nlsConvertLChar
nlsConvertNLS
nlsConvertNLSCheck
nlsConvertToUCS2
nlsCopyString
nlsCopynlsStr
nlsCountBytes
nlsCountChars
nlsCountColumns
nlsCreateConversion
nlsCreateLocale
nlsDbCollationToLocale
nlsExtract
nlsFindCharBack
nlsFindCharForw
nlsFindLtrimPtrForw
nlsFindRtrimPtrBack
nlsGetBufOfnlsStr
nlsGetBufSizeOfnlsStr
nlsGetCharProperty
nlsGetIntConversionProperty
nlsGetIntLocaleProperty
nlsGetIntNLSProperty
nlsGetNextChar
nlsGetNextWord
nlsGetOSCharset
nlsGetPrevChar
nlsGetProCharset
nlsGetStrConversionProperty
nlsGetStrLengthOfnlsStr
nlsGetStrLocaleProperty
nlsGetStrNLSProperty
nlsInit
nlsInitString
nlsIsSortNeeded
nlsLCharToChar
nlsLocaleToDbCollation
nlsLowerCase
nlsReplace
nlsReplaceAll
nlsSearchBack
nlsSearchForw
nlsSetString
nlsSortKey
nlsSqlLike
nlsSubstr
nlsUpperCase
nlsValidateString

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

udsexit_
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ccxlate_
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4da2c5971f6c4383cd03c7cf956e85ae

Headers

File Characteristics

Imports

kernel32

msvcr71

Exports

Exports

Sections

.text Size: 50KB - Virtual size: 49KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 2KB

udsexit_ Size: 512B - Virtual size: 85B

ccxlate_ Size: 512B - Virtual size: 296B

.rsrc Size: 100KB - Virtual size: 100KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 50KB - Virtual size: 49KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 2KB

udsexit_
Size: 512B - Virtual size: 85B

ccxlate_
Size: 512B - Virtual size: 296B

.rsrc
Size: 100KB - Virtual size: 100KB

.reloc
Size: 2KB - Virtual size: 1KB