af46a707eb4128662a11b3f49706bbb30f0f8f327faa806dbcc795481cc6199c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af46a707eb4128662a11b3f49706bbb30f0f8f327faa806dbcc795481cc6199c
Size

60KB
MD5

890865f986a22c62d37984b1eb399c17
SHA1

412b8e1b9901aced614724ac94ec3eadc49c961c
SHA256

af46a707eb4128662a11b3f49706bbb30f0f8f327faa806dbcc795481cc6199c
SHA512

b537787b4c798d171f872c1a8df190ca4c364d005c2fe285c346f3d3653cc126c15d569b897c91a6171ff2b0492621893b382cb7208094d806b1d5d1c387b9b8
SSDEEP

1536:3nmQ2Dx6bmKhvSF7pk/bOjervQRTJ1Sn:3LNqKUp6OjervQNJ1

Score

N/A

Malware Config

Signatures

Files

af46a707eb4128662a11b3f49706bbb30f0f8f327faa806dbcc795481cc6199c
.dll windows x86

fb80c36fb7b215891313566eb6277b51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetVersion
UnmapViewOfFile
GetCurrentProcess
VirtualAlloc
CloseHandle
ExitProcess
CreateFileMappingA
MapViewOfFile
VirtualQuery
VirtualFree
GetCurrentProcessId

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ