ef7098e2a3f210ebb3ef993150c85c8fdd0f4f75b125003633754c349b8adffd

Sharing

Copy URL Twitter E-mail

General

Target

ef7098e2a3f210ebb3ef993150c85c8fdd0f4f75b125003633754c349b8adffd
Size

179KB
MD5

275b0af31c5cbbe5d3105cd8972e6da6
SHA1

36f924561ac5efe4efbf6571895b717815fa2080
SHA256

ef7098e2a3f210ebb3ef993150c85c8fdd0f4f75b125003633754c349b8adffd
SHA512

65caad943406ba322f5b7272dd07b83d97d3cd0d99ccba259d632c6928089a40ffeb83c616be9a150a0eb9900484ccb95422271397dad3cb959df2552119b9b6
SSDEEP

3072:WR1xP5M3P1HbeFgTWTBfK5rkPu0dOgPELnq4RxR29BsiuQwE:WRPP4P1HGCWTBkGlrPELnZfo9Bf2E

Score

N/A

Malware Config

Signatures

Files

ef7098e2a3f210ebb3ef993150c85c8fdd0f4f75b125003633754c349b8adffd
.dll windows x86

83b86bea2b0fdfd06a8e910fdd32e6c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
FreeLibrary
GetModuleFileNameW
VirtualAlloc
VirtualProtect
VirtualFree
SetLastError
IsBadReadPtr
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GetCommandLineA
RtlUnwind
GetLastError
RaiseException
HeapReAlloc
WideCharToMultiByte
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
ReadFile
SetFilePointer
WriteFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreateFileW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CreateFileA

Exports

Exports

CertInstallAll
GetCertPEMDLL
GetInfoDLL
InstallFirefoxDirectory
InstallUserDLL
InstallWindowsBinaryDLL
InstallWindowsDLL
SetAnswerDLL
SetCertDLL
SetLogFunctionDLL
ShutdownDLL

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83b86bea2b0fdfd06a8e910fdd32e6c7

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 64KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 5KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 65KB - Virtual size: 64KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 5KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB