11747[.]dat | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

11747.dat
Size

414KB
MD5

0609a6c8a79223564fa4e913b52b1765
SHA1

441ef947a740b4e6152ba5a5d0927eafcfaba359
SHA256

ef826d96ec3c441364bbef030aa7f76700074c713ed76e622019de1c8baa85de
SHA512

cf06da08d4ef50d73cd9ab2b8e0c42310a36c1e39768c3430f674e39da4e7e7c25361e8e39aadb2dd300f95db8c11b2e9f84bc3cd84d7324704019c692a08cab
SSDEEP

6144:Iubpx1ymed01f3UBRxFoNgKIlp6Ydc2Zo5QLxZ8Ex6kmh08PfJO8L:XN8d0dkfxFoNgKIlbdc2WQLy28

Score

1^/10

Malware Config

Signatures

Files

11747.dat
.dll windows x86

ed7b82ba2c3d48fc4ed65dff68081358

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
isalnum
isalpha
iscntrl
isgraph
islower
isprint
ispunct
isspace
isupper
isxdigit
malloc
memcmp
memcpy
memmove
memset
realloc
strchr
strcmp
strlen
strncmp
tolower
toupper
vfprintf

Exports

Exports

Spcre_OP_lengths
Spcre_default_tables
Spcre_find_bracket
Spcre_hspace_list
Spcre_is_newline
Spcre_ord2utf
Spcre_ucd_caseless_sets
Spcre_ucd_records
Spcre_ucd_stage1
Spcre_ucd_stage2
Spcre_ucp_gbtable
Spcre_ucp_gentype
Spcre_utf8_table1
Spcre_utf8_table1_size
Spcre_utf8_table2
Spcre_utf8_table3
Spcre_utf8_table4
Spcre_utt
Spcre_utt_names
Spcre_utt_size
Spcre_valid_utf
Spcre_vspace_list
Spcre_was_newline
Spcre_xclass
Scre_assign_jit_stack
Scre_callout
Scre_compile
Scre_compile2
Scre_config
Scre_copy_named_substring
Scre_copy_substring
Scre_dfa_exec
Scre_exec
Scre_free
Scre_free_study
Scre_free_substring
Scre_free_substring_list
Scre_fullinfo
Scre_get_named_substring
Scre_get_stringnumber
Scre_get_stringtable_entries
Scre_get_substring
Scre_get_substring_list
Scre_jit_free_unused_memory
Scre_jit_stack_alloc
Scre_jit_stack_free
Scre_maketables
Scre_malloc
Scre_pattern_to_host_byte_order
Scre_refcount
Scre_stack_free
Scre_stack_guard
Scre_stack_malloc
Scre_study
Wind

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 940B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed7b82ba2c3d48fc4ed65dff68081358

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 200KB - Virtual size: 199KB

.data Size: 512B - Virtual size: 252B

.rdata Size: 93KB - Virtual size: 93KB

.bss Size: - Virtual size: 940B

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 108KB - Virtual size: 106KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 200KB - Virtual size: 199KB

.data
Size: 512B - Virtual size: 252B

.rdata
Size: 93KB - Virtual size: 93KB

.bss
Size: - Virtual size: 940B

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 108KB - Virtual size: 106KB

.reloc
Size: 7KB - Virtual size: 7KB