2ab9597d394fbe4360ab319865cd662bdbd077a8f4b5b395dfc3662ccf414b11

Sharing

Copy URL Twitter E-mail

General

Target

2ab9597d394fbe4360ab319865cd662bdbd077a8f4b5b395dfc3662ccf414b11
Size

53KB
MD5

64c69e145655f25b450a686a211c9610
SHA1

ed0b4078a7c063a719f6c3a02b865db529e5dfdb
SHA256

2ab9597d394fbe4360ab319865cd662bdbd077a8f4b5b395dfc3662ccf414b11
SHA512

c2ff0eb0bb2e9d26fe33b9b98e6835566aabe8ec4c3ae3f1abf7e59db76709501c37e9e56e32dd945e1b54c93d4a8c852819a39acd52bbc7c9d7f665c4485602
SSDEEP

1536:hmckPxiTfl2GGR2wfNh5XlZc3SR3Cf3g9c7sVy3D2W/o:YckPxiTN2GGR2eNXlK3QYwW3D2

Score

N/A

Malware Config

Signatures

Files

2ab9597d394fbe4360ab319865cd662bdbd077a8f4b5b395dfc3662ccf414b11
.dll windows x86

105f233d0e5db86b1f4409873b8b8e3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
SetFileTime
GetFileTime
LocalAlloc
LocalFree
TlsGetValue
_lopen
_lread
GetLastError
_lwrite
_lclose
_llseek
FreeLibrary
InterlockedExchangeAdd
GetProcAddress
LoadLibraryW
TlsSetValue
_lcreat
lstrcmpiA
GetFullPathNameA
DeleteFileA
GetFileSize
ReadFile
SetFilePointer
GetFileSizeEx
CloseHandle
CreateFileW
IsDBCSLeadByte
LoadLibraryExW
SetErrorMode
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
lstrlenA
CompareStringA
CompareStringW
GetSystemDirectoryW
GetWindowsDirectoryW
MoveFileW
lstrcmpiW
lstrlenW
DeleteFileW
LZClose
LZCopy
LZInit
GetFileAttributesW
LZCloseFile
WideCharToMultiByte
LZCreateFileW
TlsFree
TlsAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter

msvcrt

_vsnprintf
memcpy
_wcsicmp
_vsnwprintf
_XcptFilter
malloc
free
_initterm
_except_handler4_common
_amsg_exit

ntdll

RtlFreeAnsiString
LdrResSearchResource
NlsMbCodePageTag
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
RtlInitUnicodeString

Exports

Exports

GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

105f233d0e5db86b1f4409873b8b8e3e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ntdll

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 33KB - Virtual size: 33KB

.text
Size: 17KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 33KB - Virtual size: 33KB