fb20d3685e3d1bf780ae42daf3402356cce88d036e38665b9650ac98b7910204

General

Target

fb20d3685e3d1bf780ae42daf3402356cce88d036e38665b9650ac98b7910204
Size

596KB
MD5

08647705f2bd9bf330aca3af90bbc3ab
SHA1

33b6e8e73289d2522e039cbcf673c45c069a5194
SHA256

fb20d3685e3d1bf780ae42daf3402356cce88d036e38665b9650ac98b7910204
SHA512

1eeb4abafbb144af70a63170aad16cf0d46de1d083e7fc55846e7ca9d92c75130ad0e23ff07243558af5dbd60c3a9b1e1ec78ca80db8c039830f30b18e461fd0
SSDEEP

12288:nl86iKTgCwUa21ttDJNmQdE1W0OQ78sQQtbtlU282NcKKKKYYYYYIdf07ZvdtixH:nlrTgCu21bJNmEE1W0OxsQQtbtS2VNc2

Score

N/A

Malware Config

Signatures

Files

fb20d3685e3d1bf780ae42daf3402356cce88d036e38665b9650ac98b7910204
.dll windows x86

b7311c169764035ae596349aa82535a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

exp
fputs
printf
pow
log
_except_handler3
strncpy
log10
atan
malloc
__security_error_handler
_initterm
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
_iob
__dllonexit
_onexit
free
calloc
_purecall
_CxxThrowException
memmove
__CxxFrameHandler
??2@YAPAXI@Z
??1type_info@@UAE@XZ
??3@YAXPAX@Z

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
IsBadReadPtr
DisableThreadLibraryCalls

Exports

Exports

RACloseCodec
RACreateDecoderInstance
RACreateEncoderInstance
RADecode
RAFlush
RAFreeDecoder
RAGetBackend
RAGetFlavorProperty
RAGetGUID
RAInitDecoder
RAOpenCodec2
RASetComMode

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7311c169764035ae596349aa82535a5

Headers

File Characteristics

Imports

msvcr71

kernel32

Exports

Exports

Sections

.text Size: 364KB - Virtual size: 363KB

.text1 Size: 4KB - Virtual size: 3KB

.rdata Size: 92KB - Virtual size: 88KB

.data Size: 52KB - Virtual size: 88KB

.data1 Size: 64KB - Virtual size: 63KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 364KB - Virtual size: 363KB

.text1
Size: 4KB - Virtual size: 3KB

.rdata
Size: 92KB - Virtual size: 88KB

.data
Size: 52KB - Virtual size: 88KB

.data1
Size: 64KB - Virtual size: 63KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 11KB