baf5a4d8895b91205e8e83f4899546031020b8be5ef1adb543a5289a8baa6568

General

Target

baf5a4d8895b91205e8e83f4899546031020b8be5ef1adb543a5289a8baa6568
Size

375KB
MD5

07138aec070b27a80e7ae1fe273c05a2
SHA1

e119d237fe730112fef7c8d8ee36d06e083d150c
SHA256

baf5a4d8895b91205e8e83f4899546031020b8be5ef1adb543a5289a8baa6568
SHA512

f73f1c14e2ae1a10ac2c7d4f5ce8f19c5cf8590f50754e0685591e99aa732f8e92b6d22ecc68bb615e4259bfa66afda0f02762e7b8b0b8d8a678f948922cb20a
SSDEEP

6144:sBhX1VLyXidI3XtbNtNjrMUdVMuWVYgneulcVBMYU9ieIRQOHe1itiU4pN1jg:MhXLLyXii3XTTjgSV7W5ny7uieILHe1

Score

N/A

Malware Config

Signatures

Files

baf5a4d8895b91205e8e83f4899546031020b8be5ef1adb543a5289a8baa6568
.dll windows x86

506ee0dcf6be078c5b781c66607c291c

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetSystemDirectoryA
GetModuleFileNameA
VirtualProtect
GetTempPathA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetLocaleInfoW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
LoadLibraryW
WriteConsoleW
SetStdHandle
CreateFileW

Exports

Exports

@Thererock@0

Sections

.text
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

506ee0dcf6be078c5b781c66607c291c

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 289KB - Virtual size: 288KB

.data Size: 75KB - Virtual size: 184KB

.rsrc Size: 1024B - Virtual size: 916B

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 289KB - Virtual size: 288KB

.data
Size: 75KB - Virtual size: 184KB

.rsrc
Size: 1024B - Virtual size: 916B

.reloc
Size: 9KB - Virtual size: 8KB