0afa0c609f9971111c9726e7a693b2447edb5c4796385be4f54c50b89435f141

General

Target

0afa0c609f9971111c9726e7a693b2447edb5c4796385be4f54c50b89435f141
Size

100KB
MD5

3e0e5a1570457a1fee30da66adf59630
SHA1

4720f252e0f109fe24714899d32f36da2e0acaaa
SHA256

0afa0c609f9971111c9726e7a693b2447edb5c4796385be4f54c50b89435f141
SHA512

27883a5a686204a87307516ac332f94d45450c0f661d957cd2e236a3f4a29228d3fc834c251a8270244dbe432c17e3a6313f9e3ed54447564f0d6bb453a52a80
SSDEEP

768:ADek029TfxwBKVugJDoNdqtiIqoJkVimi4PRH7OmhRMDantEDHAdvyUMbbbbboi:AyAwBqHV3kVxb3RFCZbbbbbjC/F

Score

N/A

Malware Config

Signatures

Files

0afa0c609f9971111c9726e7a693b2447edb5c4796385be4f54c50b89435f141
.dll windows x86

e68cec24c478b9d72360aa221dd50a1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
IsProcessorFeaturePresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
GetCurrentThread
GetProcAddress
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
WriteFile
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize

Exports

Exports

Amce

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e68cec24c478b9d72360aa221dd50a1d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 41KB - Virtual size: 49KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 41KB - Virtual size: 49KB

.reloc
Size: 3KB - Virtual size: 2KB