d0671d082f8d324972071b3d92dfc59167b218e97b67fd9baf5d39f84110675e

General

Target

d0671d082f8d324972071b3d92dfc59167b218e97b67fd9baf5d39f84110675e
Size

692KB
MD5

a2d402db1c8926c050e9aee6ce8e2ae0
SHA1

1bbc63ece75ff716502627cc1ababef034c082e9
SHA256

d0671d082f8d324972071b3d92dfc59167b218e97b67fd9baf5d39f84110675e
SHA512

43dd49444b0d98e6eb7045c6a0205d4f32a2b6569fea05a118f226dc2c8d513d3c38071efc5ed7cae3dcee1e292bbecaf5e89986a715633723d5a40fa8b0a08c
SSDEEP

12288:ICZzvJsH/qrhMmC5ea/VhTy8VrOJD9VLlS8W+iH/pEs0TRdyYlT+6yBZ:ICm/fe8VCt9VLlS81iH/pEs0TRdyYlTc

Score

N/A

Malware Config

Signatures

Files

d0671d082f8d324972071b3d92dfc59167b218e97b67fd9baf5d39f84110675e
.dll windows x86

19c2b550317c37b5077d5e3d966ad4c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessW
SetHandleInformation
WaitForSingleObject
GetTickCount
VirtualFree
WriteFile
ReadProcessMemory
GetFileAttributesW
TerminateProcess
ReadFile
GetModuleFileNameW
CreateFileW
SetThreadContext
GetLastError
GetProcAddress
VirtualAlloc
VirtualAllocEx
SetCurrentDirectoryW
CreatePipe
GetModuleHandleA
lstrcatW
CloseHandle
WriteProcessMemory
ResumeThread
CreateThread
CreateMutexW
GetTempPathW
GetThreadContext
GetCurrentThreadId
GetCommandLineA
RaiseException
HeapAlloc
HeapFree
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcess
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
HeapSize
HeapReAlloc
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 642KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19c2b550317c37b5077d5e3d966ad4c4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 642KB - Virtual size: 646KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 642KB - Virtual size: 646KB

.reloc
Size: 6KB - Virtual size: 6KB