a89fe3b09c91b4a24313dfb8f4ffaaec9adfe36756a38821465c4808b15ad539

General

Target

a89fe3b09c91b4a24313dfb8f4ffaaec9adfe36756a38821465c4808b15ad539
Size

86KB
MD5

6fcc28b9ef6257c7622ef9bda1696cf6
SHA1

4e51538143ce020e2fe753b0d7d141a598aa6c8e
SHA256

a89fe3b09c91b4a24313dfb8f4ffaaec9adfe36756a38821465c4808b15ad539
SHA512

d2e3f09903b8ca3e9bfa9c5c6373bc54ada942e069905c9609f2621ad31979dbab030812cf56a7f78239d2880457412b996c2fe56022243842fc6189a095579c
SSDEEP

1536:HfxSvbnyQoQ/vZClaq5IXIyGzODmmklbU2ES3VJyYPFSS0:HfxSvbnZovGXhGTPFFFJxPG

Score

N/A

Malware Config

Signatures

Files

a89fe3b09c91b4a24313dfb8f4ffaaec9adfe36756a38821465c4808b15ad539
.dll windows x86

2b434f10cfb76f662aae6395de1e49b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
SetHandleCount
GetFileType
SetStdHandle
CloseHandle
SetFilePointer
LoadLibraryA
VirtualAlloc
FlushFileBuffers
HeapAlloc
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
lstrcpyA
HeapFree
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
WriteFile
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection

ltkrn80n

ord146
ord221
ord218
ord208
ord186
ord203
ord219
ord217
ord220

Exports

Exports

DllMain
fltInfo
fltLoad
fltSave

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b434f10cfb76f662aae6395de1e49b9

Headers

File Characteristics

Imports

kernel32

ltkrn80n

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 8KB

.idata Size: 61KB - Virtual size: 61KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 8KB

.idata
Size: 61KB - Virtual size: 61KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB