de30dc44540f1ec9523557b59a21d9e637a680deefee9194fd571e037e46f69d

Sharing

Copy URL Twitter E-mail

General

Target

de30dc44540f1ec9523557b59a21d9e637a680deefee9194fd571e037e46f69d
Size

444KB
MD5

77a851d4632772721116f36fe96e2fdf
SHA1

a9b3f39e6ae987108d40892da2c9c46f77732ef4
SHA256

de30dc44540f1ec9523557b59a21d9e637a680deefee9194fd571e037e46f69d
SHA512

bbfec7cfe1247e74346e558dab5c3b43ebe87a36a52ee75c98e622a0b4e9f0b5b593633a531572c8c11eb944e28b1033ca1c6f0b097e36611f6bc5b602ed13cd
SSDEEP

6144:eSKo3TFevCVrEFgLh3iMI9SePLM0a64bXa1ebNpP8OmZ2dAfQfD:ht3UPPxa6sXaIBVShfE

Score

N/A

Malware Config

Signatures

Files

de30dc44540f1ec9523557b59a21d9e637a680deefee9194fd571e037e46f69d
.dll windows x86

51693a2616624e74f737e3f791de4a06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetCurrentDirectoryA
RtlUnwind
RaiseException
IsBadReadPtr
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
ExitProcess
TerminateProcess
GetCurrentProcess
MoveFileA
DeleteFileA
CloseHandle
GetFileType
CreateFileA
GetCommandLineA
GetVersion
HeapFree
HeapReAlloc
HeapAlloc
HeapSize
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
GetFullPathNameA
SetStdHandle
SetHandleCount
GetStdHandle
GetStartupInfoA
SetEndOfFile
ReadFile
SetFilePointer
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
IsBadWritePtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetTimeZoneInformation
LoadLibraryA
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

BIBUtilsGetVersion
BIBUtilsInitialize
BIBUtilsTerminate

Sections

.text
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

51693a2616624e74f737e3f791de4a06

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 133KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 28KB - Virtual size: 33KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 14KB

.text Size: 232KB - Virtual size: 232KB

.text
Size: 136KB - Virtual size: 133KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 28KB - Virtual size: 33KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 14KB

.text
Size: 232KB - Virtual size: 232KB