6e006d0ac92346564e33f03b87d372c1ff288648b53368dd3b06a21530611fda

General

Target

6e006d0ac92346564e33f03b87d372c1ff288648b53368dd3b06a21530611fda
Size

56KB
MD5

ea7303cb9191f2fda1cac06699fadc5f
SHA1

d18663988ac7e883c3fde09b96e3333ca8ab3989
SHA256

6e006d0ac92346564e33f03b87d372c1ff288648b53368dd3b06a21530611fda
SHA512

98453d6148abce5d17afdef04635f113b21b7d37a93d428c802e4da9fbe8b8a39d41f6a16f53c58e54b35871fc3c9556f96e23510f795cd422a93d389a5f1642
SSDEEP

768:yq1k+CUBR1UTmGwHH8M5TcduyWz3Ise4uh+3KsUgNGRmjxWqI//vn+jonyx4s52:QUPGTmGwnb5TPbICK3g3NWqgvco3V

Score

N/A

Malware Config

Signatures

Files

6e006d0ac92346564e33f03b87d372c1ff288648b53368dd3b06a21530611fda
.dll windows x86

544458e4f993083062364e111439c171

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
GlobalAlloc
GetModuleHandleA
GetEnvironmentVariableA
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetLastError
CloseHandle
ReadFile
InitializeCriticalSection
WriteFile
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GlobalFree
GetACP
GetCPInfo
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
FlushFileBuffers
CreateFileA
InterlockedDecrement
InterlockedIncrement
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

ijl15

ord5
ord3
ord4
ord2

Exports

Exports

CleanUpImageBuffer
CompJpeg
ConvertYUV411ToRGB32
DecompJpegBody
DecompJpegHeader
InitJpeg
InsertWatermark
LoadBmp
LoadJpg
ProoveWatermark
SaveBmp
SaveJpg
TermJpeg
flipDib
flipDib_half_height

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

544458e4f993083062364e111439c171

Headers

File Characteristics

Imports

kernel32

ijl15

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.reloc
Size: 4KB - Virtual size: 3KB