d3fb2d636ebc454119b5d29c62ba4b6211ae9cf6b2864e65e11ab16da6a3e8cb

Sharing

Copy URL Twitter E-mail

General

Target

d3fb2d636ebc454119b5d29c62ba4b6211ae9cf6b2864e65e11ab16da6a3e8cb
Size

167KB
MD5

6cc4b28e30e3047e23c5c2f8be852010
SHA1

e5784c0a1fd0feaccaffb14c984477b403703adc
SHA256

d3fb2d636ebc454119b5d29c62ba4b6211ae9cf6b2864e65e11ab16da6a3e8cb
SHA512

681d95b15da2e7adbc44336ba5c8c0adddfd4ff632ecb00805e6623ad6c670b009b5f45d10e388f9c81651b41869abecde10a18c6db897fbaf9a7a8a09d0904f
SSDEEP

3072:K0fdkHdzdHqWzlJ0SDoASpY28+bMi+MvrPnTcSU9xSue9+F89qX:bcdHqWzz1o/pYn+9+wr4D3LF89

Score

N/A

Malware Config

Signatures

Files

d3fb2d636ebc454119b5d29c62ba4b6211ae9cf6b2864e65e11ab16da6a3e8cb
.dll windows x86

d36cad0942e890a4017c32b8eec4e750

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_purecall
strncmp
strtok
_stricmp
isdigit
strchr
_atoi64
strstr
wcschr
strtoul
_local_unwind2
_except_handler3
free
_initterm
malloc
_onexit
__dllonexit
_adjust_fdiv

ntdll

RtlAcquireResourceExclusive
RtlInitializeResource
RtlAcquireResourceShared
RtlReleaseResource
RtlDeleteResource

kernel32

SetWaitableTimer
VirtualAlloc
lstrlenA
lstrcpyA
WideCharToMultiByte
SetLastError
InterlockedExchange
HeapAlloc
GetProcessHeap
HeapFree
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateMutexA
lstrcmpiA
SetEvent
ResetEvent
lstrcmpA
CreateThread
InterlockedCompareExchange
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
FreeLibrary
WaitForMultipleObjects
CreateWaitableTimerW
LoadLibraryA
DelayLoadFailureHook
GetLastError
Sleep
GetTickCount
DisableThreadLibraryCalls
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteTimerQueueTimer
MultiByteToWideChar
lstrlenW
InterlockedDecrement
CreateTimerQueueTimer
ResumeThread
lstrcpynA
InterlockedIncrement
VirtualProtect
DeleteTimerQueueEx
GetProcAddress

advapi32

RegQueryValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
QueryServiceStatus
StartServiceA
CloseServiceHandle
RegOpenKeyExA

ws2_32

socket
WSAIoctl
inet_ntoa
WSAGetLastError
getsockname
inet_addr
WSAStartup
sendto
setsockopt
recvfrom
ioctlsocket
__WSAFDIsSet
select
closesocket
htons
htonl
WSACleanup
bind

user32

PeekMessageW
MsgWaitForMultipleObjectsEx
TranslateMessage
DispatchMessageW
wsprintfA

rpcrt4

RpcStringBindingComposeA
RpcStringFreeA
RpcBindingFromStringBindingA
NdrClientCall2
I_RpcExceptionFilter
UuidFromStringW
RpcBindingFree

iphlpapi

NotifyAddrChange
GetAdaptersInfo

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

VariantClear
SysStringLen
SysAllocString
VariantInit
SysFreeString

Exports

Exports

ServiceMain
DHDisableDeviceHost
DHEnableDeviceHost
DHSetICSInterfaces
DHSetICSOff
DeregisterNotification
DeregisterService
DeregisterServiceByUSN
FindServices
FindServicesCallback
FindServicesCancel
FindServicesClose
FreeSsdpMessage
GetFirstService
GetNextService
RegisterNotification
RegisterService
SsdpCleanup
SsdpStartup

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d36cad0942e890a4017c32b8eec4e750

Headers

File Characteristics

Imports

msvcrt

ntdll

kernel32

advapi32

ws2_32

user32

rpcrt4

iphlpapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 29KB - Virtual size: 28KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 134KB - Virtual size: 134KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 29KB - Virtual size: 28KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 134KB - Virtual size: 134KB

.reloc
Size: 2KB - Virtual size: 2KB