b4d240f10e29214fe37d5a875546dbe57bee4b7eee8700a5562df2f28177fb87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4d240f10e29214fe37d5a875546dbe57bee4b7eee8700a5562df2f28177fb87
Size

92KB
MD5

457ec0deaa66de8ae049fa1561f3fd2a
SHA1

564ed9c9e7c688e09ccf089374d81bc451f4ea5c
SHA256

b4d240f10e29214fe37d5a875546dbe57bee4b7eee8700a5562df2f28177fb87
SHA512

0d807c5b58735ef9ae0941794b0df379e68896d8ad7d6c7c114b5d056535eb5aa4a6b0828fdcec62c4bc00c2714309b9f852f6b9bcc6f4b61e16f6726eb90bd9
SSDEEP

1536:hpCTj3rA070Sp/S1AtPPE0SlgFfhvUMUIFTM+RVxecgNcr1Fl5Oy/IgV:DCTDrfzp/r1E/qFfhvUMvM+RH2IfbI

Score

N/A

Malware Config

Signatures

Files

b4d240f10e29214fe37d5a875546dbe57bee4b7eee8700a5562df2f28177fb87
.dll windows x86

2324d8fb235f249c435aefbf05343e4a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetFullPathNameW
SetEndOfFile
GetDiskFreeSpaceExW
GetLogicalDriveStringsW
GetModuleHandleW
DeleteFileW
GetSystemInfo
GetVersionExW
SetFilePointerEx
GetCurrentThread
GetDriveTypeW
FormatMessageW
GetProcAddress
CreateHardLinkW
GetModuleHandleA
GetVolumeInformationW
GetTimeFormatW
LocalFree
GetFileSizeEx
GetDateFormatW
CloseHandle
GetLastError
CreateFileW
DeviceIoControl

advapi32

OpenEventLogW
LookupAccountSidW
RevertToSelf
LookupAccountNameW
AdjustTokenPrivileges
AllocateAndInitializeSid
LookupPrivilegeValueW
CheckTokenMembership
CloseEventLog
OpenProcessToken
OpenThreadToken
ImpersonateSelf
ReadEventLogW
LookupAccountSidA

Exports

Exports

dvceco

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ