e0f66cc7ff1cdd6afab9b7c460746b53b1f7ebdf3dd2b7f794bbeb2277322c23

Sharing

Copy URL Twitter E-mail

General

Target

e0f66cc7ff1cdd6afab9b7c460746b53b1f7ebdf3dd2b7f794bbeb2277322c23
Size

193KB
MD5

81cf68767d1069cb9bf0f7b46dc1de25
SHA1

0e38d72aecb305fd5b4bb3822e3f2084edd14714
SHA256

e0f66cc7ff1cdd6afab9b7c460746b53b1f7ebdf3dd2b7f794bbeb2277322c23
SHA512

e08dc51dc552ce97856ef76fc851a8a276f5bd6eedd0ef5f5ce08d793a23725458c999373603e5dee8277b4b2354ae79d6704e709e968daddbc314452b382cef
SSDEEP

6144:WSi2Vz5nnDCjI/tsOdO1MQvRUv2TuBOT:W12PD+pRUuTxT

Score

N/A

Malware Config

Signatures

Files

e0f66cc7ff1cdd6afab9b7c460746b53b1f7ebdf3dd2b7f794bbeb2277322c23
.dll windows x86

a93f0030a97f88b64f252e5dea517567

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
OutputDebugStringW
GetModuleFileNameW
FreeLibrary
lstrlenW
lstrcatW
LoadLibraryW
VirtualQuery
IsBadReadPtr
CreateFileA
GetFileSize
ReadFile
GetTickCount
CloseHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

gdi32

BitBlt
DeleteObject
SelectObject
CreateCompatibleDC
CreateDIBSection
DeleteDC

msvcr90

_CxxThrowException
_purecall
fclose
fread
fwrite
fseek
floor
fflush
feof
ferror
fputc
getc
strcpy
??2@YAPAXI@Z
fopen
calloc
abs
longjmp
strcmp
_setjmp3
__CxxLongjmpUnwind
acos
sin
cos
strlen
realloc
abort
sprintf
memcmp
fabs
pow
fprintf
__iob_func
strtod
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
strncpy
memset
memcpy
malloc
free
__CxxFrameHandler3
??3@YAXPAX@Z
ftell

Exports

Exports

ConverBmpToPng
IsPngTransparent
Png12Draw
Png12Info

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a93f0030a97f88b64f252e5dea517567

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

msvcr90

Exports

Exports

Sections

.text Size: 97KB - Virtual size: 97KB

.rdata Size: 19KB - Virtual size: 18KB

.data Size: 69KB - Virtual size: 70KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 97KB - Virtual size: 97KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 69KB - Virtual size: 70KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB