831c96340f60a2a23a3785aed036f55183809b1c85938f7b93ef9b075df563cf

General

Target

831c96340f60a2a23a3785aed036f55183809b1c85938f7b93ef9b075df563cf
Size

92KB
MD5

29494c611df1387d29bb1fa42f304a90
SHA1

78dd48e6339e60fdae0606a7509a4b954c499673
SHA256

831c96340f60a2a23a3785aed036f55183809b1c85938f7b93ef9b075df563cf
SHA512

23dfd28a0e16e4bf54042f0308ffbc7964275cbcf6e287a9fdf0c8b7324bda268bf5088398eadfd4db707101bea75779f1a647e4d3c22ca6bad91fc60cf9ba77
SSDEEP

1536:EWCVZtZKTbPR7vrxbNkmhRdcWECmt5ni0LK0E5R75aSiT21idsgSz:EvZtMbPR7DxVRdL4lm0E5R75aSrJrz

Score

N/A

Malware Config

Signatures

Files

831c96340f60a2a23a3785aed036f55183809b1c85938f7b93ef9b075df563cf
.dll windows x86

0ccc8a2ceb70040977d38a208061c3d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

libtiff

TIFFNumberOfStrips
TIFFTileSize
_TIFFmalloc
TIFFScanlineSize
TIFFClose
TIFFStripSize
TIFFReadRawTile
TIFFSetErrorHandler
TIFFSetWarningHandler
TIFFReadRawStrip
TIFFReverseBits
TIFFReadEncodedTile
TIFFReadEncodedStrip
TIFFIsByteSwapped
_TIFFfree
TIFFNumberOfTiles
TIFFSetDirectory
TIFFSetField
TIFFError
TIFFWarning
TIFFIsTiled
TIFFGetFieldDefaulted
TIFFRGBAImageBegin
TIFFRGBAImageGet
TIFFRGBAImageEnd
TIFFGetField
TIFFReadDirectory
TIFFClientOpen

ricommon

??1FilePreviewExtern@@UAE@XZ
?NewPage@FilePreviewExtern@@UAEXIIIINN@Z
?WritePageExtern@FilePreviewExtern@@QAEHPAE@Z
?WriteTrailer@FilePreviewExtern@@QAEHXZ

msvcrt

_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
sprintf
ceil
_CxxThrowException
_purecall
_ftol
fwrite
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
fseek
fread
fopen
malloc
fclose
_filelength
free
_adjust_fdiv
_strdup

kernel32

DisableThreadLibraryCalls

Exports

Exports

Construct
TiffPreview

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0ccc8a2ceb70040977d38a208061c3d9

Headers

File Characteristics

Imports

libtiff

ricommon

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 920B

.text Size: 64KB - Virtual size: 64KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 920B

.text
Size: 64KB - Virtual size: 64KB