55d6a611ebd14072d84444ec6fda83992802385e6b34e15802eaa6ab6d526671

General

Target

55d6a611ebd14072d84444ec6fda83992802385e6b34e15802eaa6ab6d526671
Size

21KB
MD5

8074cd058a1b5207d5359465d1b07f89
SHA1

1de7d095a891cdea9e1fcbec90bc86c7344955a4
SHA256

55d6a611ebd14072d84444ec6fda83992802385e6b34e15802eaa6ab6d526671
SHA512

4dd634485f866aa431b37716f53f73cdec673e9b8ba556a97acc3da8468d461823b47f03bdcd3eeb3fa991af855c38619d728f476ae02638dd94942179e60f0c
SSDEEP

192:+tVyOlOIJOSA/ECWclP0Ha01GPjmUN/HIhwmwTU8pt3WwxqiHXTgROC3X3PGR63B:+tV5Qr/EQNurEmuIhwyG5jYOOnPGc1jZ

Score

N/A

Malware Config

Signatures

Files

55d6a611ebd14072d84444ec6fda83992802385e6b34e15802eaa6ab6d526671
.dll windows x86

9710431cee97926269b9d3888919ca5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
IsBadReadPtr
Sleep
DisableThreadLibraryCalls
GetModuleHandleA
VirtualProtect
CreateThread
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
SetUnhandledExceptionFilter
EncodePointer

user32

GetCursorPos
MessageBoxA
SetRect
GetAsyncKeyState

d3dx9_43

D3DXCreateFontA

msvcr100

_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm
free
_malloc_crt
vsprintf_s
malloc
memset
__CxxFrameHandler3
_encoded_null
memcpy

Sections

_TEXT
Size: 512B - Virtual size: 431B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9710431cee97926269b9d3888919ca5b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

d3dx9_43

msvcr100

Sections

_TEXT Size: 512B - Virtual size: 431B

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 2KB - Virtual size: 1KB

_TEXT
Size: 512B - Virtual size: 431B

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 2KB - Virtual size: 1KB