5d94b39fd34513a9d5d0968d89d961fc67a586ef016d158a4d82cebb2437c633

General

Target

5d94b39fd34513a9d5d0968d89d961fc67a586ef016d158a4d82cebb2437c633
Size

225KB
MD5

7bdd8fbaedca951a03e84242e97fc8f0
SHA1

66f19a90c486514b7a3b0e1778dc55b1208f0340
SHA256

5d94b39fd34513a9d5d0968d89d961fc67a586ef016d158a4d82cebb2437c633
SHA512

a4cd24a7aab12ec85d6ea27253f227888d1026857fd1d911a4da5517a5ed6dc234f9a4541f077195d3e8bd1208603dfb787e32af158df3370bb0d3115aec19f2
SSDEEP

3072:8TgIXAK7MMWWoRlahhRxN3i6Oni0JfUOd86dW/i15RdkHLpxMSr/rR5iGzjjI86:T4B7MMEArWDJfUG1hjMdmOQGnjF

Score

N/A

Malware Config

Signatures

Files

5d94b39fd34513a9d5d0968d89d961fc67a586ef016d158a4d82cebb2437c633
.dll windows x86

35051591ab7a1923d1cb845e4719ba91

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetFileAttributesA
FindFirstFileW
GetFileAttributesW
GetShortPathNameW
GetShortPathNameA
WriteConsoleW
CreateFileW
GetTempFileNameW
GetTempFileNameA
GetLocaleInfoW
GetDateFormatA
GetTimeFormatA
GetCurrencyFormatA
GetNumberFormatA
WideCharToMultiByte
CreateThread
ResetEvent
CreateEventA
GetComputerNameA
HeapFree
HeapAlloc
SetThreadPriority
ResumeThread
GetFileInformationByHandle
WriteFile
LockFile
SetFilePointer
GetFileSize
FlushFileBuffers
GetLocaleInfoA
Sleep
GetTempPathA
CloseHandle
DeleteFileA
GetLocalTime
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
GetUserDefaultLCID
VirtualFree
VirtualQuery
VirtualAlloc
CompareStringA
DeleteFileW
SetEnvironmentVariableA
CompareStringW
GetSystemDefaultLCID
IsBadStringPtrA
TerminateProcess
GetLastError
FoldStringA
LocalAlloc
GetProcAddress
FreeLibrary
InterlockedExchange
LoadLibraryA
RaiseException

Exports

Exports

NotThisReading

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata3
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 698B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35051591ab7a1923d1cb845e4719ba91

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 12KB

.data Size: 14KB - Virtual size: 14KB

.fdata3 Size: 7KB - Virtual size: 7KB

.rsrc Size: 188KB - Virtual size: 188KB

.reloc Size: 1024B - Virtual size: 698B

.text
Size: 13KB - Virtual size: 12KB

.data
Size: 14KB - Virtual size: 14KB

.fdata3
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 188KB - Virtual size: 188KB

.reloc
Size: 1024B - Virtual size: 698B