prepossessing[.]dll[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

prepossessing.dll.exe
Size

102KB
MD5

815f4128f43d70c76b5e2dfdc1b1d434
SHA1

3e73d23f74d863cc6bc00f22f191c65b9a67f1fd
SHA256

c6d6277f1355336eb5da55531c1cc927067a1defee412c60ceb281452d2388d6
SHA512

3c631b4a1f3b6a70d2b844555eec1ec824b60405f7735407af9ba90b7984efc53a0ad34b08074cf82347d60b29b5b0d5078899332dad05c2ad031f09bf1aad3c
SSDEEP

3072:Qw+w7pjT7S0PVxHXDs3fqDgHtglWfgjP8xlhkoxXmi:n+w9vo7

Score

N/A

Malware Config

Signatures

Files

prepossessing.dll.exe
.dll windows x64

af7e0c989744b102be2963f270813484

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateEventW
WaitForSingleObject

msvfw32

ICRemove
ICImageDecompress
DrawDibClose
MCIWndCreateW

ole32

HDC_UserMarshal
StgCreatePropSetStg
HMENU_UserUnmarshal
GetHGlobalFromStream

Exports

Exports

AFienMkhfZADXdHHucBEfkFuBjHoGa
AZzXNdzMJWxmQsTKmHbFZZblLHUqu
BqhoZkXosjOvoudTbnKikDL
CAUntwNvVtIEPMzoFrORqzIdd
CcgqllqeKkfTgRKZbuDSIyeh
EaSKCfDQUSvYHhOSNgZdjdPzlSU
GYoWviFWzRcYmFDRJDgFxfYoW
KHumnabGJDgwPuKJzXpkjtLTncA
MbXEogWLYTzTkhzlBI
QEWEumfoDXxheUatcdTO
RZAiGuXGRMwrfpfJjKVucow
SvWMHxeAFHBihKHSmBEZJxzA
TstDWfLsVFLUfiKiz
UJyLoPfkdlsYHMGpLtiuiOMmK
VGjUOAdlQbiZwAFCM
WqBdxKxMSmoarEPlwoJaHoFsTkqg
YTaMLgcDFuswaJumDoz
aliajAyjeEUbFijQNMymkXFjjrdlOh
cCdBKOJjaeVrplTKHriA
clbjtnMbaxxboXdJiAchgZGLs
hBqdCVMzouCDnHDvVGkY
hKHLzZwXSFhDoTLgKI
iKvEUDTnlNAljZmaQucQiF
iSnXwVwsLbgKlpEaUAZlhwUMaRpi
jkpqOZIUmSqbcYkv
kKqNrzLddtTxsmmtxqFWIDTr
qTlQiBQbygoWsZLZ
qnCcuxBYBJeMifdvjT
qvYoDHgtsQkSVENPYtVxL
qxsVhcOkdeRfKklDYZgyUGXGqIwreiR
rDQaIsRVfXVhhuNnLUjkekdk
spDAmVaRPJbhLmyWvytMxuqbfTS
tRRkNXrIXqkxsbiOafKn
urMkvttOUomAfHKblcFogf
uuVtIQgVfIUEuGtGoh
uygsadtayssyduajsdfdgd
vKvWbJweTtOXJxXrbGSRBRvkyTEqmdL
xDnnpWaUPhSlmzdtMZrIAyZhIlkkWq
zCpxAeXGjpRpwkWhjiohdpMjtna

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wwlq
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

af7e0c989744b102be2963f270813484

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvfw32

ole32

Exports

Exports

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 66KB - Virtual size: 66KB

.sdata Size: - Virtual size: 36B

.wwlq Size: 1024B - Virtual size: 1024B

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 66KB - Virtual size: 66KB

.sdata
Size: - Virtual size: 36B

.wwlq
Size: 1024B - Virtual size: 1024B