0d3eb7c82f462fcba564562db493532f9215bd38e5c92bcb13a69c5fb284a526

General

Target

0d3eb7c82f462fcba564562db493532f9215bd38e5c92bcb13a69c5fb284a526
Size

168KB
MD5

025f03ec2d94678284d19cf691a85930
SHA1

da2bb01b79aa255fc0f7a0324a482da763ad08d9
SHA256

0d3eb7c82f462fcba564562db493532f9215bd38e5c92bcb13a69c5fb284a526
SHA512

8dd38213afe904a63395616dcc5c15280912310db238c154de6bf096a2eba5975a493d14d31e6bab5242362ea796e5a332928d0b2b134fc46e23932b9f48f765
SSDEEP

3072:4acBNdk7rgBE61/Kw0AMgX3bc7/l7tUBMAicEWtG3esedcKsJpF:bcBNMWKVAMYMnL33edclpF

Score

N/A

Malware Config

Signatures

Files

0d3eb7c82f462fcba564562db493532f9215bd38e5c92bcb13a69c5fb284a526
.dll windows x86

8ded2989e383aec2b74733393340edd0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
LeaveCriticalSection
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
GetProcAddress
GetModuleHandleA
RaiseException
RtlUnwind
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetLastError
CloseHandle
ReadFile
SetFilePointer
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
EnterCriticalSection
TlsGetValue
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
SetStdHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile

Exports

Exports

MpegClose
MpegGetDimension
MpegGetNextFrame
MpegOpen
_MpegGetFrame@12

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8ded2989e383aec2b74733393340edd0

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 64KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 20KB - Virtual size: 26KB

.rsrc Size: 4KB - Virtual size: 800B

.reloc Size: 8KB - Virtual size: 4KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 68KB - Virtual size: 64KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 20KB - Virtual size: 26KB

.rsrc
Size: 4KB - Virtual size: 800B

.reloc
Size: 8KB - Virtual size: 4KB

.rmnet
Size: 60KB - Virtual size: 60KB