98ca4a520ac1ac4ce9b3ba501d1863ebb5d5c985e32bcfc4163dc0dc79a562a6

General

Target

98ca4a520ac1ac4ce9b3ba501d1863ebb5d5c985e32bcfc4163dc0dc79a562a6
Size

256KB
MD5

4e85dafa824c814c5c824295375552f0
SHA1

95696d727524013233cab1d5b7661f4adc3eb96d
SHA256

98ca4a520ac1ac4ce9b3ba501d1863ebb5d5c985e32bcfc4163dc0dc79a562a6
SHA512

7eae5f0e6f215ffc40feb0cb42eb526bef78ed09012301bd6ffe63b18a27d601711ba68047cefb7cbee0cd1c1a4594b87df55bcea055c196b6f7c2300dd36b9f
SSDEEP

3072:PUCSZ3HUxnwaHoRnesC5rfcEMx2TaHoRnesC5rfcEMx26Ho9ZzrWW1RZv4yCblan:PZSqxwRe9DcjkRe9DcjM11Hv4yCbc1

Score

N/A

Malware Config

Signatures

Files

98ca4a520ac1ac4ce9b3ba501d1863ebb5d5c985e32bcfc4163dc0dc79a562a6
.dll windows x86

86eb742b42043d09b1621d8884ecb5ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetFilePointer
CloseHandle
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

JAD_DecodeClose
JAD_DecodeOneFrame
JAD_DecodeOpen

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

86eb742b42043d09b1621d8884ecb5ce

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 108KB - Virtual size: 107KB

.data Size: 24KB - Virtual size: 102KB

.rsrc Size: 4KB - Virtual size: 1024B

.reloc Size: 8KB - Virtual size: 4KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 108KB - Virtual size: 107KB

.data
Size: 24KB - Virtual size: 102KB

.rsrc
Size: 4KB - Virtual size: 1024B

.reloc
Size: 8KB - Virtual size: 4KB

.rmnet
Size: 60KB - Virtual size: 60KB