086012f4ac9b4979cfd71f566a95c1386e6cac9346ec60690d28bdd8294ca356

Sharing

Copy URL Twitter E-mail

General

Target

086012f4ac9b4979cfd71f566a95c1386e6cac9346ec60690d28bdd8294ca356
Size

382KB
MD5

9634789bc79d6848bc2918e5d8192a90
SHA1

d3bf75de22890df98c06dec9ce4f1d4e81ea3803
SHA256

086012f4ac9b4979cfd71f566a95c1386e6cac9346ec60690d28bdd8294ca356
SHA512

96cbda27a75e12ccc08ef866b221eca441834f4ac556f78b3f01ab6b9c3523c1f642adbe53df1bcbc8079de01182fc82959d46773b51daa622e694cb801a2b7d
SSDEEP

3072:xF/ilpPXTKWSDOk9fEX8nDzzn7qKKsE93b6Lzbqd1f:7kXTr/kjXz+KK/93GL6h

Score

N/A

Malware Config

Signatures

Files

086012f4ac9b4979cfd71f566a95c1386e6cac9346ec60690d28bdd8294ca356
.dll windows x86

7d7777f3f356c3a4702391a8ea891d01

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
SetStdHandle
CloseHandle
SetFilePointer
LoadLibraryA
FlushFileBuffers
WideCharToMultiByte
GetEnvironmentStringsW
HeapFree
HeapAlloc
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
lstrcpyA
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
TerminateProcess
GetCurrentProcess
GetStdHandle
WriteFile
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetFileType
GetOEMCP
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

avifil32

AVIStreamLength
AVIStreamStart
AVIFileExit
AVIStreamRelease
AVIStreamGetFrameClose
AVIStreamReadFormat
AVIStreamFindSample
AVIStreamOpenFromFileA
AVIFileInit
AVIStreamRead
AVIStreamGetFrame
AVIStreamGetFrameOpen
AVIStreamSampleToTime

ltkrn12n

ord100
ord163
ord108
ord110
ord129
ord141
ord179
ord125
ord175

Exports

Exports

DllMain
fltFreeData
fltInfo
fltLoad
fltSave

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 357KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7d7777f3f356c3a4702391a8ea891d01

Headers

File Characteristics

Imports

kernel32

avifil32

ltkrn12n

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 8KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text Size: 357KB - Virtual size: 360KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 8KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 357KB - Virtual size: 360KB