plibiconv_version
pliases_lookup
pconv_canonicalize
pibiconv
pibiconv_close
pibiconv_open
pibiconv_open_into
pibiconv_relocate
pibiconv_set_relocation_prefix
pibiconvctl
pibiconvlist
qqqb
Static task
static1
General
-
Target
deskmon.dat
-
Size
1.0MB
-
MD5
e31f6176bb528433591525f8b7cf91de
-
SHA1
f6e307442b2fa60e2fa5e616d1b55c33b3a0cd96
-
SHA256
623b8e815fc6c8ca8bc452eb8db9a99836e9f4cbc25e72e3442467b683088ca0
-
SHA512
a3567fc5a963295bedfb49919fab40dba4467779fdd36292c7edc4bdb4378a75bec09f244631c15f8071961df6556c9fb05a623f2af5acd17267e5438b8acb07
-
SSDEEP
24576:vxjzJfW1fil8KupGavkg3NyY+bbTNYIBAUZLYqX:J9Og8KupGaXXEYIBAUZLYE
Score
N/A
Malware Config
Signatures
Files
-
deskmon.dat.dll windows x86
5e2a8adbd67a9f695a7d7e5f915f640f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___mb_cur_max_func
_amsg_exit
_errno
_initterm
_iob
_lock
_unlock
abort
atoi
calloc
free
fwrite
malloc
memcmp
memcpy
memset
qsort
realloc
setlocale
sprintf
strchr
strcmp
strcpy
strlen
strncmp
strrchr
vfprintf
_strdup
Exports
Exports
Sections
.text Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 822KB - Virtual size: 822KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 373B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ