719fbdefe6d67d80917fb31fabf02c0a158653eb94fa01c1acbfe6c3b20c12d1

General

Target

719fbdefe6d67d80917fb31fabf02c0a158653eb94fa01c1acbfe6c3b20c12d1
Size

15KB
MD5

6bd343288efa55944bc3cc797e15bee0
SHA1

4db9124135df09c3fdc14a81c9e517511a0ae1cf
SHA256

719fbdefe6d67d80917fb31fabf02c0a158653eb94fa01c1acbfe6c3b20c12d1
SHA512

abfe8c9bb6538509d5d1aeaa54890b1f36b0acf0460caceb5c8e440ecbac783077cccdf8125cd5dd1b90359060137b99fb3f31abb3c6d563cb2da866d480d4b6
SSDEEP

192:3UyO93M60qJKX2mdh/72az5GiypbfUfprYy3X3PGR67ZcuFjcB2L1iRRRO:3Uj3M60qJKGmdMaz5P2GYenPGmZL3

Score

N/A

Malware Config

Signatures

Files

719fbdefe6d67d80917fb31fabf02c0a158653eb94fa01c1acbfe6c3b20c12d1
.dll windows x86

a7d303678c9765d33814d09fe16275bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
Sleep
DisableThreadLibraryCalls
GetModuleHandleA
VirtualProtect
CreateThread
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
UnhandledExceptionFilter
EncodePointer

user32

GetCursorPos
MessageBoxA
SetRect
GetAsyncKeyState

d3dx9_43

D3DXCreateFontA

msvcr100

_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm
free
_malloc_crt
malloc
vsprintf_s
memset
_encoded_null
memcpy

Sections

_TEXT
Size: 512B - Virtual size: 431B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7d303678c9765d33814d09fe16275bc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

d3dx9_43

msvcr100

Sections

_TEXT Size: 512B - Virtual size: 431B

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1KB - Virtual size: 1KB

_TEXT
Size: 512B - Virtual size: 431B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1KB - Virtual size: 1KB