29f754323f00e4cf1f5b4577d36f2daadf973768ac3d74a5fab26f78ab8ee1f3

Sharing

Copy URL

Twitter E-mail

General

Target

29f754323f00e4cf1f5b4577d36f2daadf973768ac3d74a5fab26f78ab8ee1f3
Size

207KB
MD5

7847c377cc2f39a923423af11008c590
SHA1

b141ed69bccb5841cace33d72dd1ff0165d2b803
SHA256

29f754323f00e4cf1f5b4577d36f2daadf973768ac3d74a5fab26f78ab8ee1f3
SHA512

ed6d9fa34a9c951791d28827a3e3288aadd918c7e6c835034e657924fc75fa58ecfb960b8cda9eadb5ce0167a3c3283ba355b98201bbe1e2882910830ddfa029
SSDEEP

3072:8yQOb1wE+Y6WkKk4g6fhhTBfzvdvMxj5f53RBTxrQrScevHqR1Uu2A:OOd+B4v7TBLvd0d5+ymUu

Score

N/A

Malware Config

Signatures

Files

29f754323f00e4cf1f5b4577d36f2daadf973768ac3d74a5fab26f78ab8ee1f3
.dll windows x86

2d0d12fa05e301e4a5c26923e9be8cfc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LoadResource
LockResource
WriteFile
CreateFileA
FindResourceA
CloseHandle
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
Sleep
ExitProcess
GetModuleFileNameA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
ReadFile
FlushFileBuffers
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
SetNamedSecurityInfoA

Exports

Exports

adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d0d12fa05e301e4a5c26923e9be8cfc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 62KB - Virtual size: 62KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 62KB - Virtual size: 62KB

.reloc
Size: 6KB - Virtual size: 6KB