cde70191a61248938ffb66a6bfde68efe3922e10bcb5a416440aef6da63035f1

General

Target

cde70191a61248938ffb66a6bfde68efe3922e10bcb5a416440aef6da63035f1
Size

164KB
MD5

0153e7ba54eea4992bc2ab9fb1f95140
SHA1

27cd15fdccf4a7be7836fbfbd7ffed1a513ed1a0
SHA256

cde70191a61248938ffb66a6bfde68efe3922e10bcb5a416440aef6da63035f1
SHA512

ca544c9e9b0a905d317a32c7055dcea0bbb7525631466c1e9d8cdb99c183bb8b1710693a00b2634552a3eea0c0d36a462b933750340a96a99b9c4d223eb8ff34
SSDEEP

3072:Pyp3Lg457HOHHHHrv/KlE8MIy9MJHN7AJfYXe9UNPDbmO8gzMHHHHHHHHHHHHQj4:PG3Ng/AE8Xy9JfYfPDb9nVGAYGre5

Score

N/A

Malware Config

Signatures

Files

cde70191a61248938ffb66a6bfde68efe3922e10bcb5a416440aef6da63035f1
.dll windows x86

211a1ac2159862c6038f1d798175f2be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetCommandLineA
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Exports

Exports

SPPlaceHolderCAH
SzGetDatadefVer

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

211a1ac2159862c6038f1d798175f2be

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 10KB - Virtual size: 15KB

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 1KB - Virtual size: 1KB

.text Size: 135KB - Virtual size: 136KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 10KB - Virtual size: 15KB

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 135KB - Virtual size: 136KB