11747[.]dat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11747.dat
Size

414KB
MD5

3fb955cdabc98222afc05c7fa76b4ef3
SHA1

0f58f9fea19fbed8a464c315864fca064280fee9
SHA256

a31a6c0eb03850339ce70c2d210a1e5be3e762167100a015e404d12b9b7b4076
SHA512

5fee27fb3c559c53a04076c023a15db49fc34fd2a00ba3fa8025b587ca43205494ab92d26172e01fc3d2314768778dca10906df7091051cd7c30c416f83fff45
SSDEEP

6144:Iubpx1ymed01f3UBRxFoNgKIlp6Ydc2Zo5QLxZ8Ex6kmh08PfJO8L:XN8d0dkfxFoNgKIlbdc2WQLy28

Score

1^/10

Malware Config

Signatures

Files

11747.dat
.dll windows x86

ed7b82ba2c3d48fc4ed65dff68081358

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
isalnum
isalpha
iscntrl
isgraph
islower
isprint
ispunct
isspace
isupper
isxdigit
malloc
memcmp
memcpy
memmove
memset
realloc
strchr
strcmp
strlen
strncmp
tolower
toupper
vfprintf

Exports

Exports

Spcre_OP_lengths
Spcre_default_tables
Spcre_find_bracket
Spcre_hspace_list
Spcre_is_newline
Spcre_ord2utf
Spcre_ucd_caseless_sets
Spcre_ucd_records
Spcre_ucd_stage1
Spcre_ucd_stage2
Spcre_ucp_gbtable
Spcre_ucp_gentype
Spcre_utf8_table1
Spcre_utf8_table1_size
Spcre_utf8_table2
Spcre_utf8_table3
Spcre_utf8_table4
Spcre_utt
Spcre_utt_names
Spcre_utt_size
Spcre_valid_utf
Spcre_vspace_list
Spcre_was_newline
Spcre_xclass
Scre_assign_jit_stack
Scre_callout
Scre_compile
Scre_compile2
Scre_config
Scre_copy_named_substring
Scre_copy_substring
Scre_dfa_exec
Scre_exec
Scre_free
Scre_free_study
Scre_free_substring
Scre_free_substring_list
Scre_fullinfo
Scre_get_named_substring
Scre_get_stringnumber
Scre_get_stringtable_entries
Scre_get_substring
Scre_get_substring_list
Scre_jit_free_unused_memory
Scre_jit_stack_alloc
Scre_jit_stack_free
Scre_maketables
Scre_malloc
Scre_pattern_to_host_byte_order
Scre_refcount
Scre_stack_free
Scre_stack_guard
Scre_stack_malloc
Scre_study
Wind

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 940B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed7b82ba2c3d48fc4ed65dff68081358

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 200KB - Virtual size: 199KB

.data Size: 512B - Virtual size: 252B

.rdata Size: 93KB - Virtual size: 93KB

.bss Size: - Virtual size: 940B

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 108KB - Virtual size: 106KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 200KB - Virtual size: 199KB

.data
Size: 512B - Virtual size: 252B

.rdata
Size: 93KB - Virtual size: 93KB

.bss
Size: - Virtual size: 940B

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 108KB - Virtual size: 106KB

.reloc
Size: 7KB - Virtual size: 7KB