efd1a86330cecba5d8d038fba65ac8e76955ed724986aa87cd6ca9f72f6941c7

Sharing

Copy URL

Twitter E-mail

General

Target

efd1a86330cecba5d8d038fba65ac8e76955ed724986aa87cd6ca9f72f6941c7
Size

500KB
MD5

be231f7879d8d2159b67b7f277527268
SHA1

d73ca3707ebd61eff15dc25d9f439d6060553818
SHA256

efd1a86330cecba5d8d038fba65ac8e76955ed724986aa87cd6ca9f72f6941c7
SHA512

54ebf014160f0d5e1912d6495bc62e122296e055b548c90b63dabe1a24af6f29ec80d08eb7fe204702b2e263603f68c0e9f534e98917eb325b6dba524e20cb82
SSDEEP

6144:RQg1U4oSvkDjQ3cCT+jFa2QuoT50qWphYWxhaGqE:Rn1/ZcDM3d+a2QB0R/YWxQZE

Score

N/A

Malware Config

Signatures

Files

efd1a86330cecba5d8d038fba65ac8e76955ed724986aa87cd6ca9f72f6941c7
.dll windows x86

ff515045c3208a71b1f3fffad295e6e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DecodePointer
DeleteCriticalSection
DisableThreadLibraryCalls
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
HeapValidate
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
RtlUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAllocEx
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcpyA

user32

MessageBoxA
MessageBoxW

Exports

Exports

AtlThunk_FreeData
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 203KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.voltbl
Size: 512B - Virtual size: 204B

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff515045c3208a71b1f3fffad295e6e6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 225KB - Virtual size: 225KB

.rdata Size: 60KB - Virtual size: 60KB

.data Size: 203KB - Virtual size: 206KB

.00cfg Size: 512B - Virtual size: 4B

.voltbl Size: 512B - Virtual size: 204B

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 225KB - Virtual size: 225KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 203KB - Virtual size: 206KB

.00cfg
Size: 512B - Virtual size: 4B

.voltbl
Size: 512B - Virtual size: 204B

.reloc
Size: 9KB - Virtual size: 8KB