5149d09ef23320826ed27b0bff6bd4a93cb8cc41db80b9af9f5c57014ae33608

Sharing

Copy URL Twitter E-mail

General

Target

5149d09ef23320826ed27b0bff6bd4a93cb8cc41db80b9af9f5c57014ae33608
Size

180KB
MD5

432b2cda1680b5571d8b7725c1f0e990
SHA1

1929cef0658df3c855c580cfe376df41f2aa3fad
SHA256

5149d09ef23320826ed27b0bff6bd4a93cb8cc41db80b9af9f5c57014ae33608
SHA512

4fb8b012875e5709fafd7261171ccf8c12f3ae4ed5fee9bebf3f1b3b6fc7a3c78371cc20f0b0e2916607b718d0d5c37e108ea234f4a68642f9f872205346d043
SSDEEP

3072:go3xq21bV9Qv/Iz/4EdKlGCf3jRzeTaFSYVH7yfrPgkpEi71P:g+xT1R9QXK/4EpCYTsHd7yDP5pEip

Score

N/A

Malware Config

Signatures

Files

5149d09ef23320826ed27b0bff6bd4a93cb8cc41db80b9af9f5c57014ae33608
.dll windows x86

27acd3155e74e3617dc770968f06eb7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
MoveFileA
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
GetModuleHandleA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
RtlUnwind
SetFilePointer
ReadFile
CloseHandle
WriteFile
WideCharToMultiByte
GetTimeZoneInformation
SetStdHandle
GetFileAttributesA
FlushFileBuffers
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
CreateFileA
GetCPInfo
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
LoadLibraryA
LCMapStringA
LCMapStringW
SetEndOfFile
CreateDirectoryA
GetDriveTypeA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileAttributesA
DeleteFileA
GetFullPathNameA
GetCurrentDirectoryA
GetSystemTime
GetLocalTime

Exports

Exports

copy_exif

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

27acd3155e74e3617dc770968f06eb7a

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 24KB - Virtual size: 30KB

.reloc Size: 8KB - Virtual size: 6KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 24KB - Virtual size: 30KB

.reloc
Size: 8KB - Virtual size: 6KB

.rmnet
Size: 60KB - Virtual size: 60KB