d8f9531e1e88be7c410f97b5f167e686717014d6673e0de3a215224c08fe5f80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8f9531e1e88be7c410f97b5f167e686717014d6673e0de3a215224c08fe5f80
Size

60KB
MD5

e7a950337dba5054c2c85a906f7972c2
SHA1

e5864675f26c0378a8a6762ab384a4239bb618e3
SHA256

d8f9531e1e88be7c410f97b5f167e686717014d6673e0de3a215224c08fe5f80
SHA512

52769026df3a104793464ae3bd0fae2f49d54ffdda1f9320091c0a2c03bd090819c50f7db1e6b95478e1f4919433b327a001aaf7119a1114802e3203b3cf296d
SSDEEP

1536:sbrFUAEtgMK6j2MONr3cTky45sWCncSna:s/FUAEtgOiJ/y455JSa

Score

N/A

Malware Config

Signatures

Files

d8f9531e1e88be7c410f97b5f167e686717014d6673e0de3a215224c08fe5f80
.dll windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
ExtAddNames
ExtGetCommandString
ExtInvokeCommand
ExtProcessDrop
ExtQueryContextMenu
ExtSetDestFolder
___CPPdebugHook

Sections

.text
Size: 54KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE