9c4d95fe5bb9aaeba89da3ffb3c18012c174169356f51f0b57bfd7909f4aa1da

General

Target

9c4d95fe5bb9aaeba89da3ffb3c18012c174169356f51f0b57bfd7909f4aa1da
Size

199KB
MD5

c7e5939d5225160350cf082da5d79b43
SHA1

623ebd0365c7e13c18a657b38dab86b3c7c09e2c
SHA256

9c4d95fe5bb9aaeba89da3ffb3c18012c174169356f51f0b57bfd7909f4aa1da
SHA512

7d927b58cc11a84cb0bf516fef445c5516ede7e8bc61e26b0db15741c31ab72fd9a19a50e2c81508d153b9b8fb0cbb954262f819ece41d041c3ec5c2bbb15474
SSDEEP

3072:hVc/H8B9RNOnYdqEurnyLCckiAfK3S9KQdzlUlN7bJQpXjDJ0zgNZL5:he/cdNO8gnXckg3gYCTAU

Score

N/A

Malware Config

Signatures

Files

9c4d95fe5bb9aaeba89da3ffb3c18012c174169356f51f0b57bfd7909f4aa1da
.dll windows x86

733c4a0b690c67f81ddb1d27a8309471

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
SetHandleCount
GetFileType
SetStdHandle
CloseHandle
SetFilePointer
LoadLibraryA
VirtualAlloc
FlushFileBuffers
HeapAlloc
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
lstrcpyA
HeapFree
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
WriteFile
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection

ltkrn90n

ord134
ord192
ord189
ord179
ord163
ord174
ord191
ord188
ord190

Exports

Exports

DllMain
fltInfo
fltLoad
fltSave

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

733c4a0b690c67f81ddb1d27a8309471

Headers

File Characteristics

Imports

kernel32

ltkrn90n

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 8KB

.idata Size: 173KB - Virtual size: 173KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 8KB

.idata
Size: 173KB - Virtual size: 173KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB