4bfc436f645277d6dc1880d10fcd72169d357f1d4e5bc62981b341a57e889260

Sharing

Copy URL Twitter E-mail

General

Target

4bfc436f645277d6dc1880d10fcd72169d357f1d4e5bc62981b341a57e889260
Size

172KB
MD5

0bc3f098a5e4f2828827448ba2a54856
SHA1

323746970ad2e7520071c6d589cf60e0ce25e426
SHA256

4bfc436f645277d6dc1880d10fcd72169d357f1d4e5bc62981b341a57e889260
SHA512

f17e6c5f9979c20daa077c845e3cf5a197ae10bd0221bafa08e39cce41ae8a9b7002deadbf03ba59343f76c19efc7a19230d7b4ffd13a63658ff184a8cb42ac4
SSDEEP

3072:9UcN3o3qFVY32b3UO3cXJ8zuWiUUxCuQ85Z1+w3WAfjuiuk1OfC3Vi7:xBoaF22b3URXJEiUAT1Wrin1OfC3Y

Score

N/A

Malware Config

Signatures

Files

4bfc436f645277d6dc1880d10fcd72169d357f1d4e5bc62981b341a57e889260
.dll windows x86

6d66f5fb1fd06d7b73d1eda8c0014b4b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc100u

ord11864
ord7126
ord1739
ord14162
ord10976
ord13267
ord11469
ord7179
ord13570
ord13567
ord13572
ord13569
ord13571
ord13568
ord3416
ord5261
ord11228
ord11236
ord4086
ord7391
ord9498
ord11240
ord11209
ord11845
ord4642
ord4923
ord5115
ord8483
ord4901
ord5118
ord4645
ord4794
ord4623
ord6931
ord6932
ord6922
ord4792
ord7393
ord9328
ord8346
ord6140
ord7176
ord1292
ord890
ord6869
ord1479
ord13434
ord2068
ord6036
ord1944
ord3625
ord3684
ord8530
ord13387
ord7108
ord13381
ord11477
ord11476
ord7911
ord867
ord2062
ord12800
ord1233
ord826
ord1314
ord2572
ord11683
ord11801
ord11838
ord7524
ord14208
ord14203
ord417
ord5852
ord4888
ord4890
ord11704
ord290
ord14206
ord2542
ord11374
ord10969
ord1269
ord868
ord1987
ord13398
ord2528
ord11333
ord5231
ord10960
ord979
ord421
ord4290
ord1312
ord266
ord265
ord1298
ord4478
ord1476
ord1480
ord4151
ord13220
ord13214
ord7914
ord2629
ord285
ord293
ord5264
ord2614
ord286
ord1313
ord1310
ord296
ord280
ord2164
ord4744
ord13854
ord11784
ord7548
ord7624
ord908
ord13605
ord2091
ord322
ord2055
ord2053
ord2080
ord1984
ord2045
ord3413
ord408
ord1953
ord2090
ord2088
ord1945
ord1873
ord1934
ord323
ord1301
ord902
ord1300

msvcr100

_CxxThrowException
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_time32
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
__CxxFrameHandler3
srand
rand
_filbuf
swscanf_s
wcstoul
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memmove
??0exception@std@@QAE@ABV01@@Z
fclose
_wremove
_wfopen_s
fwrite
fseek
ftell
fread
?what@exception@std@@UBEPBDXZ
malloc
free
_wtoi
wcsftime
_localtime64_s
_time64
vswprintf_s
sprintf_s
_purecall
strpbrk
strchr
sscanf
memset
calloc
memcpy
strlen
_chkesp
atoi
strncpy
_flsbuf

kernel32

WideCharToMultiByte
WriteFile
WaitNamedPipeW
CreateFileW
CreateEventW
DeleteCriticalSection
GetLastError
WaitForSingleObject
ResetEvent
SetEvent
GetTickCount
CreateEventA
CreateFileA
GetOverlappedResult
CancelIo
Sleep
LocalFree
LocalAlloc
EncodePointer
DecodePointer
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
CloseHandle
InitializeCriticalSection
ReadFile
IsProcessorFeaturePresent
GetModuleFileNameW

advapi32

RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegEnumValueW

shlwapi

PathIsDirectoryW
PathFileExistsW
PathAddBackslashW
PathRemoveFileSpecW
PathUnquoteSpacesW

msvcp100

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_BADOFF@std@@3_JB
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1_Container_base12@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?uncaught_exception@std@@YA_NXZ

rpcrt4

UuidCreate

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList

Exports

Exports

DMRBurnProc
DMRCheckArmMain
DMRCheckFileFormatAndSize
DMRCheckModelVer
DMRCheckProc
DMRCheckSoftDog
DMREraseProc
DMRGetCommonPara
DMRReadProc

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d66f5fb1fd06d7b73d1eda8c0014b4b

Headers

DLL Characteristics

File Characteristics

Imports

mfc100u

msvcr100

kernel32

advapi32

shlwapi

msvcp100

rpcrt4

setupapi

Exports

Exports

Sections

.text Size: 130KB - Virtual size: 130KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 1KB - Virtual size: 55KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 13KB - Virtual size: 13KB

.text
Size: 130KB - Virtual size: 130KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 1KB - Virtual size: 55KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 13KB - Virtual size: 13KB