01aa2e7804c6e6ffec4a9737de1ff03b4bf75f02353fb96e504ec77d2cdb8518

Sharing

Copy URL Twitter E-mail

General

Target

01aa2e7804c6e6ffec4a9737de1ff03b4bf75f02353fb96e504ec77d2cdb8518
Size

218KB
MD5

f5c18ff302b62698708343c4a33764a8
SHA1

7423539a002307adf14b003139e8a82cf5b43704
SHA256

01aa2e7804c6e6ffec4a9737de1ff03b4bf75f02353fb96e504ec77d2cdb8518
SHA512

548066354914d8762ae715c11ff571b4418e10b578d31fd5a46a2d8d95591a6924781e066455c7f1a53d6518a6321a69c038765e2a19e6b7f4b085c886c0f671
SSDEEP

6144:3TXGjSNGr9fvoAIIitPT1qROITh3qxMaS:3bGjsGZfgAIIitgTVOS

Score

N/A

Malware Config

Signatures

Files

01aa2e7804c6e6ffec4a9737de1ff03b4bf75f02353fb96e504ec77d2cdb8518
.dll windows x86

7b05912702ace8497b89d5f99df9367a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
GetProcAddress
LoadLibraryA
TlsAlloc
TlsFree
GetLastError
SetLastError
GetCurrentThreadId
GetCurrentProcessId
FreeLibrary
CreateFileW
GetStringTypeW
LCMapStringW
WriteConsoleW
ReadFile
MultiByteToWideChar
GetProcessHeap
SetEndOfFile
SetFilePointer
TlsGetValue
EncodePointer
DecodePointer
GetCommandLineA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
IsProcessorFeaturePresent
Sleep
HeapSize
GetModuleHandleW
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
CloseHandle
InterlockedIncrement
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
HeapReAlloc
LoadLibraryW
CreateFileA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

user32

GetPropA
RemovePropA
GetClientRect
SetPropA
SetWindowLongA
InvalidateRect
CallWindowProcA
GetWindowThreadProcessId
GetDC
ReleaseDC
IsWindow

gdi32

GetDeviceCaps

Exports

Exports

eglBindAPI
eglBindTexImage
eglChooseConfig
eglCopyBuffers
eglCreateContext
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreateWindowSurface
eglDestroyContext
eglDestroySurface
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetProcAddress
eglInitialize
eglMakeCurrent
eglQueryAPI
eglQueryContext
eglQueryString
eglQuerySurface
eglReleaseTexImage
eglReleaseThread
eglSurfaceAttrib
eglSwapBuffers
eglSwapInterval
eglTerminate
eglWaitClient
eglWaitGL
eglWaitNative

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7b05912702ace8497b89d5f99df9367a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 74KB - Virtual size: 73KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 8KB

.text Size: 108KB - Virtual size: 112KB

.text
Size: 74KB - Virtual size: 73KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 8KB

.text
Size: 108KB - Virtual size: 112KB