67c1dcc4b87c9edc09776e3fdc5d94243393f823f80ec8ce61fb81a7518cbcbf

Sharing

Copy URL Twitter E-mail

General

Target

67c1dcc4b87c9edc09776e3fdc5d94243393f823f80ec8ce61fb81a7518cbcbf
Size

457KB
MD5

08efb501880e897a4983b34ecf0617e7
SHA1

14ebe8f5ca9eb9822387e1facbe697eb5e9a28e0
SHA256

67c1dcc4b87c9edc09776e3fdc5d94243393f823f80ec8ce61fb81a7518cbcbf
SHA512

87e76ccf1f199725efcf94841de7106896d5b3bb977a2be37195ad428465a763e386dd8f40d4e327674757d1cc3d1d276d2dd9d5f2ec98507d5ec38ca465f353
SSDEEP

6144:R7xK/317iSpy24OEPmdKU6zdtshchyaklxPUgi5+VplKLISLu43oC4Ikv:C317d4Oez1wwAbl4I0u43yIkv

Score

N/A

Malware Config

Signatures

Files

67c1dcc4b87c9edc09776e3fdc5d94243393f823f80ec8ce61fb81a7518cbcbf
.dll windows x86

ddfe9f0e1eeaab33eb85dbdc1611ea1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
SizeofResource
VirtualProtect
GetCurrentProcess
VirtualAlloc
GetModuleHandleA
GetLastError
DisableThreadLibraryCalls
GetSystemDirectoryA
LoadLibraryA
LockResource
LoadResource
FindResourceW
GetSystemWow64DirectoryA
GetProcAddress
ReadProcessMemory
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
CloseHandle

msvcp140

?_Xlength_error@std@@YAXPBD@Z

shlwapi

PathFindFileNameA

vcruntime140

__current_exception_context
memset
memmove
memcpy
_except_handler4_common
__current_exception
_CxxThrowException
__std_exception_copy
__CxxFrameHandler3
__std_exception_destroy
__std_type_info_destroy_list
__std_terminate

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
terminate
_seh_filter_dll
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 441KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ddfe9f0e1eeaab33eb85dbdc1611ea1e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

shlwapi

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 441KB - Virtual size: 440KB

.reloc Size: 1024B - Virtual size: 784B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 441KB - Virtual size: 440KB

.reloc
Size: 1024B - Virtual size: 784B