countervailing[.]dll[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

countervailing.dll.exe
Size

102KB
MD5

d92b8e2f3d9bff91f18aa537c6c965bf
SHA1

298ccb177c3d2e2ff17a4c355a17d020d7a9406b
SHA256

05b9b3805e5be9d68a08874e8c0ac73ea66c8a71ede76de9f5d6aacba4d8cc4e
SHA512

3a8873844d570f76f18631ed1eedfde65caab084975bade20ffb40490c62a29cd9fd835fa8bfa096f5b24a64df82ea36de6e16e2236bdb68b3767739e45664bd
SSDEEP

3072:Tw+w7pjT7A0PVxHXDs3fqDgHtglWfgjP8xlhkoxX4P:c+w9vSk

Score

N/A

Malware Config

Signatures

Files

countervailing.dll.exe
.dll windows x64

af7e0c989744b102be2963f270813484

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateEventW
WaitForSingleObject

msvfw32

ICRemove
ICImageDecompress
DrawDibClose
MCIWndCreateW

ole32

HDC_UserMarshal
StgCreatePropSetStg
HMENU_UserUnmarshal
GetHGlobalFromStream

Exports

Exports

AFienMkhfZADXdHHucBEfkFuBjHoGa
AZzXNdzMJWxmQsTKmHbFZZblLHUqu
BqhoZkXosjOvoudTbnKikDL
CAUntwNvVtIEPMzoFrORqzIdd
CcgqllqeKkfTgRKZbuDSIyeh
EaSKCfDQUSvYHhOSNgZdjdPzlSU
GYoWviFWzRcYmFDRJDgFxfYoW
KHumnabGJDgwPuKJzXpkjtLTncA
MbXEogWLYTzTkhzlBI
QEWEumfoDXxheUatcdTO
RZAiGuXGRMwrfpfJjKVucow
SvWMHxeAFHBihKHSmBEZJxzA
TstDWfLsVFLUfiKiz
UJyLoPfkdlsYHMGpLtiuiOMmK
VGjUOAdlQbiZwAFCM
WqBdxKxMSmoarEPlwoJaHoFsTkqg
YTaMLgcDFuswaJumDoz
aliajAyjeEUbFijQNMymkXFjjrdlOh
cCdBKOJjaeVrplTKHriA
clbjtnMbaxxboXdJiAchgZGLs
hBqdCVMzouCDnHDvVGkY
hKHLzZwXSFhDoTLgKI
iKvEUDTnlNAljZmaQucQiF
iSnXwVwsLbgKlpEaUAZlhwUMaRpi
jkpqOZIUmSqbcYkv
kKqNrzLddtTxsmmtxqFWIDTr
qTlQiBQbygoWsZLZ
qnCcuxBYBJeMifdvjT
qvYoDHgtsQkSVENPYtVxL
qxsVhcOkdeRfKklDYZgyUGXGqIwreiR
rDQaIsRVfXVhhuNnLUjkekdk
spDAmVaRPJbhLmyWvytMxuqbfTS
tRRkNXrIXqkxsbiOafKn
urMkvttOUomAfHKblcFogf
uuVtIQgVfIUEuGtGoh
uygsadtayssyduajsdfdgd
vKvWbJweTtOXJxXrbGSRBRvkyTEqmdL
xDnnpWaUPhSlmzdtMZrIAyZhIlkkWq
zCpxAeXGjpRpwkWhjiohdpMjtna

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sAjY
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

af7e0c989744b102be2963f270813484

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvfw32

ole32

Exports

Exports

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 66KB - Virtual size: 66KB

.sdata Size: - Virtual size: 36B

.sAjY Size: 1024B - Virtual size: 1024B

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 66KB - Virtual size: 66KB

.sdata
Size: - Virtual size: 36B

.sAjY
Size: 1024B - Virtual size: 1024B