78bf7d1a530c0f3f08a5d6a28f440e7c65278973560174927c20346fd758c897

General

Target

78bf7d1a530c0f3f08a5d6a28f440e7c65278973560174927c20346fd758c897
Size

89KB
MD5

338857343b75089d59f52cf52b834f3f
SHA1

c7594d35805bf14003202fcdf2cdef05302123fe
SHA256

78bf7d1a530c0f3f08a5d6a28f440e7c65278973560174927c20346fd758c897
SHA512

317baec11c149ed065c51766e8ff1fde47b768bb0aa72a8b0af0f403cc9aee73060d142364440b1da2153514d7cda8e44110d39e219aa8e94c37fefdbb58d977
SSDEEP

1536:URl6QbhWpF/kA9JZcau/FiezXlguqL+yV9xF3l3SHeUHGnk:URl6QbhWp6A9gtFVXG+ypFR0HWk

Score

N/A

Malware Config

Signatures

Files

78bf7d1a530c0f3f08a5d6a28f440e7c65278973560174927c20346fd758c897
.dll windows x86

de9c7a95ed21de88297c1eab24750cf8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

diva

DIVAGetOutputFrame
DIVAPutInputFrame
DIVAGetInputFrame
DIVAReleaseInstance
DIVAReleaseFrame
DIVAReset
DIVAGetDelay
DIVABootup
DIVASetupProcessModule
DIVASetupStreamInfo
DIVACreateInstance

msvcr80

_encode_pointer
_malloc_crt
free
??3@YAXPAX@Z
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
??2@YAPAXI@Z
_encoded_null

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
Sleep

Exports

Exports

ANL_CreateImgData
ANL_DefDenoiseParam
ANL_ImageDenoise
ANL_ImgFmtTrans
ANL_NoiseEstimate
ANL_ReleaseImgData

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

de9c7a95ed21de88297c1eab24750cf8

Headers

File Characteristics

Imports

diva

msvcr80

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 872B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 400B

.text Size: 79KB - Virtual size: 80KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 872B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 400B

.text
Size: 79KB - Virtual size: 80KB