475c282ce07de58cf98ce37f4674dac4cb006eccf0ffd68ea197c411289dd7ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

475c282ce07de58cf98ce37f4674dac4cb006eccf0ffd68ea197c411289dd7ca
Size

76KB
MD5

7bd2db7f887db95450725a6f3abb9aa9
SHA1

dca3f761492cf1065a4dda70b18fdb5b534f6eb2
SHA256

475c282ce07de58cf98ce37f4674dac4cb006eccf0ffd68ea197c411289dd7ca
SHA512

0d0c2c2ed64c987e5eb28899af26d2f36ec1311736bf643bf1540d85bbd12cced440bcdd48eaf5e2571e9f09bee41de58a32f9da11d43deba88261085d18cc0c
SSDEEP

1536:1eMuzBYK+PLpTRNz44RhpRgKWoiyZQsYYUnRHqy5SPnYrlt:ozBYK4Rt5DyoXK9PxKnYrl

Score

N/A

Malware Config

Signatures

Files

475c282ce07de58cf98ce37f4674dac4cb006eccf0ffd68ea197c411289dd7ca
.dll windows x86

5b215ba3e045a0837fe379a5754551f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
GetFileSize
ReadFile

Exports

Exports

Capizhocr
CreateProcessNotify
Ofayci
Sueypimqix

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ