e5-25dfe66252a062886a6dede40b0282b2[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

e5-25dfe66252a062886a6dede40b0282b2.dll
Size

747KB
MD5

25dfe66252a062886a6dede40b0282b2
SHA1

3829f03e497c087d8c77b7d43e124475ae3fe78d
SHA256

1ce9416eb920e8f82e04aded2a635baa293b6ace9cddd8ff8f893ad7f6df0478
SHA512

3f9c9d6e895f618718f26535c4918401883899bd94edcde4e6d2631b41bea8b9bb769261aa85255a0dd6271de64a2cfea7e0b6668371963f8623922718468333
SSDEEP

12288:yaj3pZeiHViu9i75YiWR8TKT0wu02OYAAQNSBf7Nfpgph3htsh03XQ4RlpZBMYgE:rDpQ5TwvtKCXQ4RlpPtlLp

Score

N/A

Malware Config

Signatures

Files

e5-25dfe66252a062886a6dede40b0282b2.dll
.dll regsvr32 windows x64

ae56bd09f6489911fbebd8ef9f3959d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateFileW
SetEndOfFile
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
EncodePointer
DecodePointer
GetLocaleInfoEx
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
FatalAppExitA
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
GetStdHandle
GetFileType
InitOnceExecuteOnce
GetStartupInfoW
CloseHandle
GetProcessHeap
SetLastError
GetCurrentThread
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
WriteFile
GetModuleFileNameW
HeapSize
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
GetACP
IsValidCodePage
GetOEMCP
GetTimeFormatEx
GetDateFormatEx
CompareStringEx
GetUserDefaultLocaleName
LCMapStringEx
IsValidLocaleName
EnumSystemLocalesEx
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
SetConsoleCtrlHandler
GetTimeZoneInformation
SetStdHandle
FreeLibrary
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
WriteConsoleW
ReadConsoleW
SetEnvironmentVariableA

ole32

CoLoadLibrary

crypt32

CryptStringToBinaryA

Exports

Exports

DllRegisterServer

Sections

.text
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae56bd09f6489911fbebd8ef9f3959d6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

crypt32

Exports

Exports

Sections

.text Size: 388KB - Virtual size: 388KB

.rdata Size: 320KB - Virtual size: 319KB

.data Size: 12KB - Virtual size: 22KB

.pdata Size: 17KB - Virtual size: 16KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 388KB - Virtual size: 388KB

.rdata
Size: 320KB - Virtual size: 319KB

.data
Size: 12KB - Virtual size: 22KB

.pdata
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 8KB - Virtual size: 7KB