0bcabf3df569dccf076997b4f3e26032f9e8ca059c3a17543d4fb41f3ff937cd

General

Target

0bcabf3df569dccf076997b4f3e26032f9e8ca059c3a17543d4fb41f3ff937cd
Size

119KB
MD5

4a3202dfbb7b881419a40423cf7f3db0
SHA1

6f541af3530cebc656aadd85ada9da3707299cdd
SHA256

0bcabf3df569dccf076997b4f3e26032f9e8ca059c3a17543d4fb41f3ff937cd
SHA512

92916c2661710b88b20bff8f47a76b5b13fba0ebb6e97d6392b6f1232c514bbb26d4c7e0e699f97452898f656440b210a900af93cf69be26cc43e0d651455f4c
SSDEEP

1536:78FH+5XvFEJpdN0Rkg0iMC5xRdEk2Kz2CbtOif/K7FUxDvzQPjmqJq1EM2LYnRAB:7aHCi7a0iMC5bd3B1b7f/Ka8Pjp3v

Score

N/A

Malware Config

Signatures

Files

0bcabf3df569dccf076997b4f3e26032f9e8ca059c3a17543d4fb41f3ff937cd
.dll windows x86

7a46a3c8c99a93b034a08ccb9b977ed3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance

kernel32

FreeEnvironmentStringsW
GetLastError
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
RaiseException
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
CloseHandle
FlushFileBuffers

Exports

Exports

GetFilterPluginInfo

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7a46a3c8c99a93b034a08ccb9b977ed3

Headers

File Characteristics

Imports

ole32

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 6KB - Virtual size: 5KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 6KB - Virtual size: 5KB

.rmnet
Size: 56KB - Virtual size: 60KB