4540437c420a271df564de380e4c4d753a08a89a4f63e980bf4cf9915576c860

Sharing

Copy URL

Twitter E-mail

General

Target

4540437c420a271df564de380e4c4d753a08a89a4f63e980bf4cf9915576c860
Size

280KB
MD5

ed6587dc604fec84e0d23dd28565747f
SHA1

01f93b134d8f35e501cf16ac64ef743818b80b4d
SHA256

4540437c420a271df564de380e4c4d753a08a89a4f63e980bf4cf9915576c860
SHA512

7154d6f616309bc4238175b9ea9aa93eeec71d2eba564fa9e7f78f34eacf3ebaadc4123e4556b3434da8a0df3b6842f2fd7eaf0cccae6cf56ca0120b3da77191
SSDEEP

6144:n0PXOPsowSsOLsZ1vQ8MFAYsNFotVHS1z:2SUZtLMFAPNCy1z

Score

N/A

Malware Config

Signatures

Files

4540437c420a271df564de380e4c4d753a08a89a4f63e980bf4cf9915576c860
.dll windows x86

dd372b0e5b41cc12286373af96abab82

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

xpcom

NS_Alloc
NS_GetComponentManager
NS_GetServiceManager
NS_Free
NS_StringCopy
NS_CStringContainerFinish
NS_CStringContainerInit
NS_CStringGetData
NS_StringContainerFinish
NS_StringContainerInit2
NS_StringContainerInit
NS_StringGetData

kernel32

EnterCriticalSection
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetProcAddress
LoadLibraryA
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
HeapAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
OpenMutexW
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
HeapSize
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
CreateThread
ExitThread
LoadLibraryW

oleaut32

VariantClear
SysFreeString
SysAllocString

nspr4

PR_AtomicIncrement
PR_AtomicDecrement

Exports

Exports

NSGetModule

Sections

.text
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd372b0e5b41cc12286373af96abab82

Headers

File Characteristics

Imports

xpcom

kernel32

oleaut32

nspr4

Exports

Exports

Sections

.text Size: 202KB - Virtual size: 202KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 5KB - Virtual size: 22KB

.rsrc Size: 1024B - Virtual size: 876B

.reloc Size: 48KB - Virtual size: 47KB

.text
Size: 202KB - Virtual size: 202KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 5KB - Virtual size: 22KB

.rsrc
Size: 1024B - Virtual size: 876B

.reloc
Size: 48KB - Virtual size: 47KB