d698b0a586360baee838506aa0f76e15beed76baa593ba4a8da86d951e051322

Sharing

Copy URL Twitter E-mail

General

Target

d698b0a586360baee838506aa0f76e15beed76baa593ba4a8da86d951e051322
Size

236KB
MD5

8654b1fe6d6fb56f20b85d7c8b89735d
SHA1

b1c9ee68331efb2b11b94e8037aa96479133d649
SHA256

d698b0a586360baee838506aa0f76e15beed76baa593ba4a8da86d951e051322
SHA512

5f746ffea5fca2f640eefc592d08f5b3c8086b4a0f7191759abf16eb9827223652e7080da9372ebdceea6c39f9ff730b3e0a75604cba4bcf125b4308d53162ef
SSDEEP

3072:G0tApA+pzdN266sSCggyMdUPPzJqVoOpC9qZn2/P6pdbRIgj3N+NF9tFGHeWQ7NH:G0tApA+12Pv7sNpPi6HRIOkF9HfgBw

Score

N/A

Malware Config

Signatures

Files

d698b0a586360baee838506aa0f76e15beed76baa593ba4a8da86d951e051322
.dll windows x86

e3bca61b5b46ef9a1163913c13000445

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
GetProcAddress
LoadLibraryA
FreeLibrary
GetStdHandle
GetStartupInfoA
SetFilePointer
SetStdHandle
FlushFileBuffers
CloseHandle
GetLocaleInfoA
GetLocaleInfoW
LCMapStringW
GetFileType
GetStringTypeA
GetStringTypeW
GetCommandLineA
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
GlobalFree
VirtualFree
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
WriteFile
InitializeCriticalSection
HeapFree
VirtualAlloc
HeapAlloc

user32

SetRect

ltkrn13n

ord135
ord241
ord110
ord128
ord218
ord157
ord196
ord115
ord112
ord219
ord111
ord221
ord108
ord125

ltdis13n

ord116
ord117

ltimg13n

ord168

Exports

Exports

DllMain
L_BarCodeExit
L_BarCodeFree
L_BarCodeGetDuplicated
L_BarCodeGetFirstDuplicated
L_BarCodeGetNextDuplicated
L_BarCodeInit
L_BarCodeIsDuplicated
L_BarCodeRead
L_BarCodeVersionInfo
L_BarCodeWrite
L_BarCodeWriteExt

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3bca61b5b46ef9a1163913c13000445

Headers

File Characteristics

Imports

kernel32

user32

ltkrn13n

ltdis13n

ltimg13n

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 10KB - Virtual size: 14KB

.idata Size: 170KB - Virtual size: 169KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 10KB - Virtual size: 14KB

.idata
Size: 170KB - Virtual size: 169KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB