51dd0ce7d49fb44ad87442dd5dcd45df3a756a114ebf04fbb1146a91df114bce

Sharing

Copy URL Twitter E-mail

General

Target

51dd0ce7d49fb44ad87442dd5dcd45df3a756a114ebf04fbb1146a91df114bce
Size

191KB
MD5

18ebe9ab2002d44e12c484122f22f6ea
SHA1

4604b57360f9684bf096807e45161a0705bbd8db
SHA256

51dd0ce7d49fb44ad87442dd5dcd45df3a756a114ebf04fbb1146a91df114bce
SHA512

7a8eca2210d83712a8da3165899fb92a49774fdb321068946a09a5c981714876c8cd962c1a7f51c19c8327bec1689a74a29286fb3c1750010d5736c39d8e3d38
SSDEEP

3072:aoYLJ3i9Q1pXxSYzK87QF42l6PxJWK7vB0sp+mIMteQg9UqklA/b+FZMlvK:0JmQThSYzxQcvWKl0S+DXkaz+FZM9K

Score

N/A

Malware Config

Signatures

Files

51dd0ce7d49fb44ad87442dd5dcd45df3a756a114ebf04fbb1146a91df114bce
.dll windows x86

833df35bef90dec42bbb37c34d3c9207

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind

kernel32

GetStdHandle
InterlockedExchange
GetACP
GetLocaleInfoA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
GetSystemInfo
InterlockedIncrement
InterlockedDecrement
CloseHandle
WaitForSingleObject
SetEvent
LeaveCriticalSection
CreateThread
CreateEventW
EnterCriticalSection
UnmapViewOfFile
FlushViewOfFile
HeapAlloc
HeapFree
GetCurrentThreadId
Sleep
ReleaseMutex
GetCurrentProcessId
HeapDestroy
GetLastError
SetEndOfFile
SetFilePointer
lstrlenA
HeapCreate
CreateMutexW
MoveFileW
DeleteFileW
lstrlenW
CreateFileW
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
GetFileSize
MulDiv
GetDiskFreeSpaceA
WideCharToMultiByte
GetFullPathNameW
MultiByteToWideChar
CompareFileTime
lstrcmpiA
lstrcmpA
GetStringTypeExA
IsDBCSLeadByte
GetCommandLineA
GetVersionExA
VirtualQuery
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapSize
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
VirtualProtect

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance

user32

SetWindowLongW
GetWindowLongW
PostMessageW
PeekMessageW
GetMessageW
IsWindow
CharLowerW
RegisterClassW
TranslateMessage
CreateWindowExW
CharUpperA
DispatchMessageW
DestroyWindow
DefWindowProcW
PostThreadMessageW
UnregisterClassW
SendMessageTimeoutW
GetClassInfoW

shlwapi

StrStrA
StrStrIA
wnsprintfW
PathRenameExtensionW
PathFileExistsW
StrCpyNW
StrCmpIW
StrToIntExA
StrCmpW

Exports

Exports

CreateDatabaseSession
DbxDllMain

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 109KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

833df35bef90dec42bbb37c34d3c9207

Headers

File Characteristics

Imports

ntdll

kernel32

ole32

user32

shlwapi

Exports

Exports

Sections

.text Size: 71KB - Virtual size: 71KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text Size: 109KB - Virtual size: 112KB

.text
Size: 71KB - Virtual size: 71KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB

.text
Size: 109KB - Virtual size: 112KB