31d8f4e617aedae829024fa43fd966f5c7d19b5f5166e859263b00cc3e774a94

Sharing

Copy URL Twitter E-mail

General

Target

31d8f4e617aedae829024fa43fd966f5c7d19b5f5166e859263b00cc3e774a94
Size

161KB
MD5

748b86411ac96efb7b22bdc39175e741
SHA1

30f2f068ddbfc12fcaa3a263bb8565788342fd7e
SHA256

31d8f4e617aedae829024fa43fd966f5c7d19b5f5166e859263b00cc3e774a94
SHA512

a6dc61a2ff594cd285ceefe2b106634afdc4489a3fe7257a8b13df5107fb86b52e66d191325d902478bb3338aa95d0c8ffa60519fb61969b0a37372a81017c03
SSDEEP

3072:3dXzGs9lx/BDAlOlZttglqFQfg0+P1mPtV1bPL:3dXz79ltBD6cACw

Score

N/A

Malware Config

Signatures

Files

31d8f4e617aedae829024fa43fd966f5c7d19b5f5166e859263b00cc3e774a94
.dll windows x86

fcba1cafb854949dbc9b4f5fc23cd2b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
SetEvent
GlobalFree
GlobalUnlock
CloseHandle
GlobalLock
CreateEventA
GlobalAlloc
lstrcpyA
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
SetErrorMode
LoadLibraryA
OpenFile
lstrcatA
lstrcmpA
GetModuleFileNameA
FreeLibrary
lstrlenA
InitializeCriticalSection
GetVersion
DeleteCriticalSection
GlobalHandle
GlobalSize
GlobalFlags
TlsSetValue
TlsAlloc
TlsFree
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
SetFilePointer
SetStdHandle
LCMapStringW
LCMapStringA
FlushFileBuffers
WriteFile
WideCharToMultiByte
VirtualAlloc
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
MultiByteToWideChar
GetCPInfo
GetStartupInfoA
GetACP
GetFileType
SetHandleCount
GetStdHandle
HeapCreate
HeapDestroy
VirtualFree
UnhandledExceptionFilter
GetCurrentProcess
ExitProcess
HeapAlloc
TerminateProcess
SetLastError
GetCurrentThreadId
RtlUnwind
GetLocaleInfoW
TlsGetValue
HeapFree
GetCommandLineA
GetDriveTypeA
GetFullPathNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
ExitThread
CreateThread
GetLastError
GetModuleHandleA
ResumeThread

user32

SetRect

ltkrn10n

ord247
ord162
ord124
ord198
ord246
ord193
ord171
ord128
ord116
ord123
ord241
ord148
ord112
ord133
ord135
ord234
ord236
ord141
ord231
ord230
ord134
ord156
ord158
ord173
ord214
ord154
ord221
ord219
ord129
ord101
ord169
ord122
ord215
ord161
ord163
ord243
ord210
ord152
ord203
ord190
ord121
ord137
ord188
ord191
ord189
ord186
ord183
ord194
ord151
ord187
ord196
ord174
ord125
ord175
ord238
ord179
ord237
ord232
ord100
ord108

Exports

Exports

DllMain
L_CompressBitmapWithStamp
L_CompressBuffer
L_DecompressBitmapMemory
L_DecompressMemory
L_DeletePage
L_EndCompressBuffer
L_EnumDimensions
L_FeedLoad
L_FileConvert
L_FileInfo
L_FileInfoMemory
L_GetComment
L_GetCompressFileStamp
L_GetDimension
L_GetExtFileOption
L_GetFileCommentSize
L_GetPCDResolution
L_GetSaveResolution
L_GetTag
L_GetWMFResolution
L_IgnoreFilters
L_LoadBitmap
L_LoadBitmapList
L_LoadBitmapMemory
L_LoadFile
L_LoadFileOffset
L_LoadFileTile
L_LoadMemory
L_PreLoadFilters
L_ReadFileComment
L_ReadFileCommentExt
L_ReadFileCommentMemory
L_ReadFileStamp
L_ReadFileTag
L_ReadFileTagMemory
L_ReadFileTransforms
L_SaveBitmap
L_SaveBitmapList
L_SaveBitmapMemory
L_SaveData
L_SaveFile
L_SaveFileMemory
L_SaveFileOffset
L_SaveFileTile
L_SetComment
L_SetDimension
L_SetExtFileOption
L_SetLoadInfoCallback
L_SetPCDResolution
L_SetSaveResolution
L_SetTag
L_SetWMFResolution
L_StartCompressBuffer
L_StartFeedLoad
L_StartSaveData
L_StopFeedLoad
L_StopSaveData
L_WriteFileCommentExt
L_WriteFileStamp
L_WriteFileTransforms

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcba1cafb854949dbc9b4f5fc23cd2b2

Headers

File Characteristics

Imports

kernel32

user32

ltkrn10n

Exports

Exports

Sections

.text Size: 77KB - Virtual size: 77KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 10KB - Virtual size: 22KB

.idata Size: 59KB - Virtual size: 58KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 77KB - Virtual size: 77KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 10KB - Virtual size: 22KB

.idata
Size: 59KB - Virtual size: 58KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 6KB