b5a123d4c152bbf44225bcf4cfcfeb18880ca8137df314b57d7c6ae0b471362b

Sharing

Copy URL Twitter E-mail

General

Target

b5a123d4c152bbf44225bcf4cfcfeb18880ca8137df314b57d7c6ae0b471362b
Size

122KB
MD5

a046935384a7e38c44eb797659a5d5d0
SHA1

af948ab14325e1111f300c1521a9d47f2a5e7ad7
SHA256

b5a123d4c152bbf44225bcf4cfcfeb18880ca8137df314b57d7c6ae0b471362b
SHA512

cec6c8dbfd111fd2956d9789f8966914ba7ffb5f7be7986292734b0ebc4944f5d13eef9e8f3bc2506c0082d4090dc106624fc108651120925b84cf926c8b2e96
SSDEEP

1536:Tp6k23+wpmCVW4J5vpGJVTnD4NVywoQcn4VmWnBN0EYnGroDDpV46REdiKqt9qp9:1EjW+NVywoQc4VmWBNiYov4eaq/

Score

N/A

Malware Config

Signatures

Files

b5a123d4c152bbf44225bcf4cfcfeb18880ca8137df314b57d7c6ae0b471362b
.dll windows x86

5be619a7249b480dd0aa78294ba8ed23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLastError
WaitForSingleObject
CloseHandle
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
HeapAlloc
HeapFree
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
RtlUnwind
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapReAlloc
ExitProcess
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

LzmaCompress
LzmaDec_Allocate
LzmaDec_Constr
LzmaDec_DecodeToBuf
LzmaDec_Free
LzmaDec_Init
LzmaEncProps_Init
LzmaEnc_Create
LzmaEnc_Destroy
LzmaEnc_Encode
LzmaEnc_SetProps
LzmaEnc_WriteProperties
LzmaUncompress

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5be619a7249b480dd0aa78294ba8ed23

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 792B

.reloc Size: 3KB - Virtual size: 3KB

.rmnet Size: 54KB - Virtual size: 56KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 792B

.reloc
Size: 3KB - Virtual size: 3KB

.rmnet
Size: 54KB - Virtual size: 56KB