baf49876832b4ceec7926d73e541d47d0d57be29c91eacb5c3c3b91c59e64ac5

General

Target

baf49876832b4ceec7926d73e541d47d0d57be29c91eacb5c3c3b91c59e64ac5
Size

248KB
MD5

0cb2cf2910321b1423a801e59f6488c0
SHA1

159199e0c46b5784e109370f1820b5aec14037fb
SHA256

baf49876832b4ceec7926d73e541d47d0d57be29c91eacb5c3c3b91c59e64ac5
SHA512

7f052062ab84fba7994d1cee8139e8ee19c215f07575e67d33ba97151c131f7d8a7c56a8d83851468d9f41211d8a3199fe26145b672fbda944728b39af09fff4
SSDEEP

1536:2HAcbd7vTA//TzgFJQG4qs2f2f2f2f2f2f2f2GGlJQ41eksU5HWVFtjmQYnn3zf7:2gATAXsOq9GlFYIKyJnDft32/hPk

Score

N/A

Malware Config

Signatures

Files

baf49876832b4ceec7926d73e541d47d0d57be29c91eacb5c3c3b91c59e64ac5
.dll windows x86

81b3cf1aabbca6d7f3f9a3fb2f41f5ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ipssrun

ord315
ord254
ord88
ord100
ord102
ord101
ord290
ord240

kernel32

TlsGetValue
HeapFree
HeapAlloc
GetLastError
GetFileAttributesW
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
CloseHandle
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetStdHandle
FlushFileBuffers
SetFilePointer
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

LGraphCmd

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

81b3cf1aabbca6d7f3f9a3fb2f41f5ce

Headers

File Characteristics

Imports

ipssrun

kernel32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 152KB - Virtual size: 148KB

.data Size: 16KB - Virtual size: 20KB

.reloc Size: 4KB - Virtual size: 3KB

.rmnet Size: 44KB - Virtual size: 44KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 152KB - Virtual size: 148KB

.data
Size: 16KB - Virtual size: 20KB

.reloc
Size: 4KB - Virtual size: 3KB

.rmnet
Size: 44KB - Virtual size: 44KB