cf7f5058d5e34912b77285e6121ac3bb3850e57d576a7f11fb9efdb9992f1e72

Sharing

Copy URL Twitter E-mail

General

Target

cf7f5058d5e34912b77285e6121ac3bb3850e57d576a7f11fb9efdb9992f1e72
Size

451KB
MD5

c649f734e58ed4f4d589564c18f098c7
SHA1

7781f6a851213760ff0017bfe070f2771f7b2db6
SHA256

cf7f5058d5e34912b77285e6121ac3bb3850e57d576a7f11fb9efdb9992f1e72
SHA512

053ffcf837fa8aff7a7aef260a62c26b7a6b3e3bd074dd12f698daf89cf4a8526ec4f27a8b4a9b327a81d30c6afe14d32813a16cc216076518d6a3a7bec7c207
SSDEEP

6144:M7i8qZc+e37OU7XUxmOVrbftBVYM84294gHyGikEKQvmcueVqwJLya3bF3bR/vxv:NZc+UOMgfpHkHCKQvieUMLya3JTv

Score

N/A

Malware Config

Signatures

Files

cf7f5058d5e34912b77285e6121ac3bb3850e57d576a7f11fb9efdb9992f1e72
.dll windows x86

45741d4155518c33c747f1f01e02af50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
SizeofResource
VirtualProtect
GetCurrentProcess
VirtualAlloc
GetModuleHandleA
GetLastError
DisableThreadLibraryCalls
GetSystemDirectoryA
LoadLibraryA
LockResource
LoadResource
FindResourceW
GetSystemWow64DirectoryA
GetProcAddress
ReadProcessMemory
EnterCriticalSection
InitializeSListHead
GetSystemTimeAsFileTime
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
CloseHandle

user32

MessageBoxA

msvcp140

?_Xlength_error@std@@YAXPBD@Z

shlwapi

PathFindFileNameA

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list
memmove
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
__std_terminate
__current_exception
__current_exception_context
_CxxThrowException
memcpy

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_initterm_e
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm
_execute_onexit_table
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Sections

tJyYA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

oMZMma
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Ezrpq
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

EGHiu
Size: 435KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

JbbnAT
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45741d4155518c33c747f1f01e02af50

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

shlwapi

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

tJyYA Size: 7KB - Virtual size: 7KB

oMZMma Size: 5KB - Virtual size: 5KB

Ezrpq Size: 512B - Virtual size: 1KB

EGHiu Size: 435KB - Virtual size: 435KB

JbbnAT Size: 1024B - Virtual size: 808B

tJyYA
Size: 7KB - Virtual size: 7KB

oMZMma
Size: 5KB - Virtual size: 5KB

Ezrpq
Size: 512B - Virtual size: 1KB

EGHiu
Size: 435KB - Virtual size: 435KB

JbbnAT
Size: 1024B - Virtual size: 808B