5b8c8a8d6fa846dfbe62553b1fb73cfa3c1b1b193fe3ac23635e7a2aaab142e4

General

Target

5b8c8a8d6fa846dfbe62553b1fb73cfa3c1b1b193fe3ac23635e7a2aaab142e4
Size

13KB
MD5

77d861c08e7d4bfec5ca739d4e235523
SHA1

c0f409aa2c40388ff5a369d120c3248b630cad6f
SHA256

5b8c8a8d6fa846dfbe62553b1fb73cfa3c1b1b193fe3ac23635e7a2aaab142e4
SHA512

e1591c3f2ce0e929fdde33f328ef4af46165ae85835ce02a2008ada6ee28cb4d5121e930ed2f594d64d0e646f77eda47ca0b90daaf5a75683472c34740c58de9
SSDEEP

192:WV488KDEB22Uq1hacbMunai9BsnB7r2mneETq7p6boiH+nUed:oWKDODUqnMIaKe7iFETVoienU

Score

N/A

Malware Config

Signatures

Files

5b8c8a8d6fa846dfbe62553b1fb73cfa3c1b1b193fe3ac23635e7a2aaab142e4
.dll windows x86

cc41b3f1420087548968b83beeb16ddc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
TerminateProcess
CloseHandle
CreateThread
Sleep
OpenProcess
WinExec
GetWindowsDirectoryA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

shlwapi

PathRemoveFileSpecA

psapi

GetModuleFileNameExA
EnumProcessModules
EnumProcesses

msvcrt

_adjust_fdiv
malloc
_initterm
strstr
free

Exports

Exports

LpkPresent
ScriptApplyDigitSubstitution
ScriptApplyLogicalWidth
ScriptBreak
ScriptCPtoX
ScriptCacheGetHeight
ScriptFreeCache
ScriptGetCMap
ScriptGetFontProperties
ScriptGetGlyphABCWidth
ScriptGetLogicalWidths
ScriptGetProperties
ScriptIsComplex
ScriptItemize
ScriptJustify
ScriptLayout
ScriptPlace
ScriptRecordDigitSubstitution
ScriptShape
ScriptStringAnalyse
ScriptStringCPtoX
ScriptStringFree
ScriptStringGetLogicalWidths
ScriptStringGetOrder
ScriptStringOut
ScriptStringValidate
ScriptStringXtoCP
ScriptString_pLogAttr
ScriptString_pSize
ScriptString_pcOutChars
ScriptTextOut
ScriptXtoCP
UspAllocCache
UspAllocTemp
UspFreeMem

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc41b3f1420087548968b83beeb16ddc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shlwapi

psapi

msvcrt

Exports

Exports

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 336B

.reloc Size: 512B - Virtual size: 184B

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 336B

.reloc
Size: 512B - Virtual size: 184B