9c16ee3ba140a6310eaa2563dc5f340be4cb7079c543016f05f00e0f86554d7c

Sharing

Copy URL Twitter E-mail

General

Target

9c16ee3ba140a6310eaa2563dc5f340be4cb7079c543016f05f00e0f86554d7c
Size

431KB
MD5

7a5f155c32583a334d569d87d3efacc0
SHA1

26a88f037455357ae0b9fe7354372ee74e673dc5
SHA256

9c16ee3ba140a6310eaa2563dc5f340be4cb7079c543016f05f00e0f86554d7c
SHA512

62d8a2b7e4cba52fbb3a43198bfe7f077363b9ed02e72efa5fbb802e22812879bad40d1ca011098a0d23eb334a185af6b3ac015f186f764b0a195326a4a9f212
SSDEEP

12288:sXSz34dI5fkpr4lYH9OyoS3qkgqAmAp8wB7Y:sZI524lYd7EqsM

Score

N/A

Malware Config

Signatures

Files

9c16ee3ba140a6310eaa2563dc5f340be4cb7079c543016f05f00e0f86554d7c
.dll windows x86

bc374b6f5d94721e551ff78a8c4979b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetLastError
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
DecodePointer
GetCommandLineA
EncodePointer
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
RtlUnwind
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
RaiseException
HeapSize
SetFilePointer
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW

Exports

Exports

NeAACDecAudioSpecificConfig
NeAACDecClose
NeAACDecDecode
NeAACDecGetCurrentConfiguration
NeAACDecGetErrorMessage
NeAACDecInit
NeAACDecInit2
NeAACDecOpen
NeAACDecPostSeekReset
NeAACDecSetConfiguration
getVersion

Sections

.text
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bc374b6f5d94721e551ff78a8c4979b2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 166KB - Virtual size: 166KB

.rdata Size: 132KB - Virtual size: 132KB

.data Size: 14KB - Virtual size: 21KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 6KB

.text Size: 108KB - Virtual size: 112KB

.text
Size: 166KB - Virtual size: 166KB

.rdata
Size: 132KB - Virtual size: 132KB

.data
Size: 14KB - Virtual size: 21KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 6KB

.text
Size: 108KB - Virtual size: 112KB