de89355883c6e75e912fd9d30a408e11707e6ce8bab1c3cc810dd93a3e3af933

General

Target

de89355883c6e75e912fd9d30a408e11707e6ce8bab1c3cc810dd93a3e3af933
Size

100KB
MD5

06b4d80b33f9383ddc4f2b03f0269a00
SHA1

bb8ddc6d59feb9ce62f2a26b8008161fdac11cd2
SHA256

de89355883c6e75e912fd9d30a408e11707e6ce8bab1c3cc810dd93a3e3af933
SHA512

cf7bfe5ea7067340b00589408699e44d2cd2cf496e0afdea44448d24b887a24bf16b3f4d30e2b1f2d28bae93f3c5cffdf4bac20ede444ab5b8e55d694ca552d6
SSDEEP

3072:MJhn8yXaW+FSgBylUEtCTK3eK7WPUhzoIqWFzJE31My:MJhKbYZ6PRQY6

Score

N/A

Malware Config

Signatures

Files

de89355883c6e75e912fd9d30a408e11707e6ce8bab1c3cc810dd93a3e3af933
.dll windows x86

ae99ef7e7269ea202dd098d5fa583d7e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetQueueStatus

kernel32

GetSystemDirectoryW
LocalFree
SetLocalTime
EscapeCommFunction
SetLocalTime
DeleteAtom
SetFileTime
LocalHandle
CreateMutexW
SetDefaultCommConfigW
TerminateProcess
GetConsoleWindow
DeleteVolumeMountPointW
ReleaseMutex
GlobalMemoryStatus
WritePrivateProfileSectionA
FindResourceExW
GetProcAddress
ReplaceFileA
SetupComm
GetPrivateProfileSectionW
DebugActiveProcess
VirtualProtect
SetLocaleInfoW
GetWindowsDirectoryA
GetTimeFormatA
VirtualAlloc
EnumSystemLanguageGroupsA
GetTickCount
LocalAlloc

Exports

Exports

PrebindingDirectory
PrebindingScreenshotWidget
PrebindingScrollingThumbnail
PrebindingWizardSoftware
PrebindingWord

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae99ef7e7269ea202dd098d5fa583d7e

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 5KB

.edata Size: 62KB - Virtual size: 62KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 80KB

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 5KB

.edata
Size: 62KB - Virtual size: 62KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 80KB