ac96bd81c6826b26af4b44c96948ebdcd1b39d3fda2d2e79bcd6080c058a995b

General

Target

ac96bd81c6826b26af4b44c96948ebdcd1b39d3fda2d2e79bcd6080c058a995b
Size

147KB
MD5

e167081ebd003e9fb4f76518977139a5
SHA1

9fda7d65b7d65c5dc0901a950169000f22b01c3c
SHA256

ac96bd81c6826b26af4b44c96948ebdcd1b39d3fda2d2e79bcd6080c058a995b
SHA512

c7a5040688e92aaba6f239d4eaad5b76251a88b5ae7ccff7750431eb4a7215e7f2ad10e67133905bfc93695281fc58bcade0de644b72f5a87c4134c4e62b1a61
SSDEEP

3072:Rc6VIF2V7gCNVwTP7O9QbIRBn/B0u/84B96/mCoFbzkzMY:RBlNNQ0J0u/8K9umCoF

Score

N/A

Malware Config

Signatures

Files

ac96bd81c6826b26af4b44c96948ebdcd1b39d3fda2d2e79bcd6080c058a995b
.dll windows x86

c4aaf649625426a86dc1976e242100a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapSize
HeapReAlloc
GetModuleHandleA
RaiseException
Sleep
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

JXVIDFLT_Convert
JXVIDFLT_Create
JXVIDFLT_Destroy

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c4aaf649625426a86dc1976e242100a0

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 60KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.rmnet Size: 64KB - Virtual size: 64KB

.text
Size: 60KB - Virtual size: 60KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB

.rmnet
Size: 64KB - Virtual size: 64KB