01[.]gif[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

01.gif.dll
Size

429KB
MD5

ef744014e574f16dcf821ed9e118137f
SHA1

248888a5e4dd518a6c689d2899927621d375f933
SHA256

7a8860f6975853e167c121a6c28b3f60c011e8aa93130856f73d9df688ec589f
SHA512

d3b4435d276487019ca77cc1919aefe47fbd9b1daee8b474237901fef6da3f086cea8edcb9285a83a4bd038b59f97e328dba40ea153efdb8967741fb4f3c6cc3
SSDEEP

6144:+1bpx1ymed01f3UBRxFoNgKIlp6Ydc2ZiKm5baKrE7eh7PilAFNZzdnLf:sN8d0dkfxFoNgKIlbdc2IOaGlAFnBT

Score

1^/10

Malware Config

Signatures

Files

01.gif.dll
.dll windows x86

ed7b82ba2c3d48fc4ed65dff68081358

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
isalnum
isalpha
iscntrl
isgraph
islower
isprint
ispunct
isspace
isupper
isxdigit
malloc
memcmp
memcpy
memmove
memset
realloc
strchr
strcmp
strlen
strncmp
tolower
toupper
vfprintf

Exports

Exports

Spcre_OP_lengths
Spcre_default_tables
Spcre_find_bracket
Spcre_hspace_list
Spcre_is_newline
Spcre_ord2utf
Spcre_ucd_caseless_sets
Spcre_ucd_records
Spcre_ucd_stage1
Spcre_ucd_stage2
Spcre_ucp_gbtable
Spcre_ucp_gentype
Spcre_utf8_table1
Spcre_utf8_table1_size
Spcre_utf8_table2
Spcre_utf8_table3
Spcre_utf8_table4
Spcre_utt
Spcre_utt_names
Spcre_utt_size
Spcre_valid_utf
Spcre_vspace_list
Spcre_was_newline
Spcre_xclass
Scre_assign_jit_stack
Scre_callout
Scre_compile
Scre_compile2
Scre_config
Scre_copy_named_substring
Scre_copy_substring
Scre_dfa_exec
Scre_exec
Scre_free
Scre_free_study
Scre_free_substring
Scre_free_substring_list
Scre_fullinfo
Scre_get_named_substring
Scre_get_stringnumber
Scre_get_stringtable_entries
Scre_get_substring
Scre_get_substring_list
Scre_jit_free_unused_memory
Scre_jit_stack_alloc
Scre_jit_stack_free
Scre_maketables
Scre_malloc
Scre_pattern_to_host_byte_order
Scre_refcount
Scre_stack_free
Scre_stack_guard
Scre_stack_malloc
Scre_study
Wind

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 940B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed7b82ba2c3d48fc4ed65dff68081358

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 200KB - Virtual size: 199KB

.data Size: 512B - Virtual size: 252B

.rdata Size: 93KB - Virtual size: 93KB

.bss Size: - Virtual size: 940B

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 108KB - Virtual size: 106KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 200KB - Virtual size: 199KB

.data
Size: 512B - Virtual size: 252B

.rdata
Size: 93KB - Virtual size: 93KB

.bss
Size: - Virtual size: 940B

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 108KB - Virtual size: 106KB

.reloc
Size: 7KB - Virtual size: 7KB