41067[.]dat[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

41067.dat.dll
Size

414KB
MD5

eb82946616340003a34f3917b18fd349
SHA1

85aba92382536f80a7674e66828397d5ae472c5f
SHA256

b258c6a501fb7d45896cd4c4b2638e552149845c391c4ce035fafa9e5b5d9a39
SHA512

4538dc07f044c00fa8d12ec054c742c1ae9819177d7b866f2dabed2361fc6d2ec71257d3ff14c18d9884f645b763b6bd5b1772a348a366736257944dc787dbd3
SSDEEP

6144:Iubpx1ymed01f3UBRxFoNgKIlp6Ydc2Zo5QLxZ8Ex6kmh08PfJO8L:XN8d0dkfxFoNgKIlbdc2WQLy28

Score

1^/10

Malware Config

Signatures

Files

41067.dat.dll
.dll windows x86

ed7b82ba2c3d48fc4ed65dff68081358

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
isalnum
isalpha
iscntrl
isgraph
islower
isprint
ispunct
isspace
isupper
isxdigit
malloc
memcmp
memcpy
memmove
memset
realloc
strchr
strcmp
strlen
strncmp
tolower
toupper
vfprintf

Exports

Exports

Spcre_OP_lengths
Spcre_default_tables
Spcre_find_bracket
Spcre_hspace_list
Spcre_is_newline
Spcre_ord2utf
Spcre_ucd_caseless_sets
Spcre_ucd_records
Spcre_ucd_stage1
Spcre_ucd_stage2
Spcre_ucp_gbtable
Spcre_ucp_gentype
Spcre_utf8_table1
Spcre_utf8_table1_size
Spcre_utf8_table2
Spcre_utf8_table3
Spcre_utf8_table4
Spcre_utt
Spcre_utt_names
Spcre_utt_size
Spcre_valid_utf
Spcre_vspace_list
Spcre_was_newline
Spcre_xclass
Scre_assign_jit_stack
Scre_callout
Scre_compile
Scre_compile2
Scre_config
Scre_copy_named_substring
Scre_copy_substring
Scre_dfa_exec
Scre_exec
Scre_free
Scre_free_study
Scre_free_substring
Scre_free_substring_list
Scre_fullinfo
Scre_get_named_substring
Scre_get_stringnumber
Scre_get_stringtable_entries
Scre_get_substring
Scre_get_substring_list
Scre_jit_free_unused_memory
Scre_jit_stack_alloc
Scre_jit_stack_free
Scre_maketables
Scre_malloc
Scre_pattern_to_host_byte_order
Scre_refcount
Scre_stack_free
Scre_stack_guard
Scre_stack_malloc
Scre_study
Wind

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 940B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed7b82ba2c3d48fc4ed65dff68081358

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 200KB - Virtual size: 199KB

.data Size: 512B - Virtual size: 252B

.rdata Size: 93KB - Virtual size: 93KB

.bss Size: - Virtual size: 940B

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 108KB - Virtual size: 106KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 200KB - Virtual size: 199KB

.data
Size: 512B - Virtual size: 252B

.rdata
Size: 93KB - Virtual size: 93KB

.bss
Size: - Virtual size: 940B

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 108KB - Virtual size: 106KB

.reloc
Size: 7KB - Virtual size: 7KB