c06c1e3082e1a9498949dd7c2295a5fcdee6f5bacc5a38b86f6a1fdddfc0cc28

Sharing

Copy URL

Twitter E-mail

General

Target

c06c1e3082e1a9498949dd7c2295a5fcdee6f5bacc5a38b86f6a1fdddfc0cc28
Size

212KB
MD5

2e3674221edca1233fa0d9029db4d21e
SHA1

7eafac774bb958455872416a4349383a2ada7b6e
SHA256

c06c1e3082e1a9498949dd7c2295a5fcdee6f5bacc5a38b86f6a1fdddfc0cc28
SHA512

77bd550141943e48e1a1ae9c921bcf6784773af6cbf28132d62ac767a72567b9530d54323b8ffb4bb576e51c2a9e88376f7ee0cf8975ccbdba2ec6a79cf7f8cb
SSDEEP

6144:1VIVRSn/WSUkU3QeeaQeeexQeesQeeEsQeehQeeTN0JFVjZk+M0s:1VILQb/0J57

Score

N/A

Malware Config

Signatures

Files

c06c1e3082e1a9498949dd7c2295a5fcdee6f5bacc5a38b86f6a1fdddfc0cc28
.dll windows x86

b69b451cf8e30fb679d4d0a2880979b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
OutputDebugStringA
Sleep
VirtualProtect
GetModuleHandleA
DisableThreadLibraryCalls
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetSystemInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter

user32

CreateWindowExA
DestroyWindow
ShowWindow

msvcr90

memset
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
??_V@YAXPAX@Z
malloc
free
??_U@YAPAXI@Z
??3@YAXPAX@Z
??2@YAPAXI@Z
_ftol
_CIacos
_finite
__CxxFrameHandler
memcpy

d3d9

Direct3DCreate9

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b69b451cf8e30fb679d4d0a2880979b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcr90

d3d9

advapi32

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 62KB - Virtual size: 61KB

.data Size: 41KB - Virtual size: 51KB

.rsrc Size: 1024B - Virtual size: 696B

.reloc Size: 19KB - Virtual size: 18KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 62KB - Virtual size: 61KB

.data
Size: 41KB - Virtual size: 51KB

.rsrc
Size: 1024B - Virtual size: 696B

.reloc
Size: 19KB - Virtual size: 18KB