8e084634f942776f71c350a5545fe39f[.]bin

General

Target

8e084634f942776f71c350a5545fe39f.bin
Size

312KB
MD5

bc314071178bf38f0c7a65cfa58c6b12
SHA1

c8e82e3e17ac91fd1f36cddf1722040e3dded489
SHA256

2eff1fe7854b24b2517b26beb341ea4f115e66894ce4a45172adc566b92b02ed
SHA512

9c1002363dc18f4b8f83dc207b16bd9ef002bc811be50609c6d1ad6f2776b79c7b4bd5e191acac76bf1e6974fd7741f69c0078a1882dfc8a0ff0957aab4348db
SSDEEP

6144:qRIRXvXNgZj/3ZeoHkRU6h7iFQ2pTiwkSOGYcsGKcnJnmz+H:hAEUSiCXwXOWsUmCH

Score

1^/10

Malware Config

Signatures

Files

8e084634f942776f71c350a5545fe39f.bin
.zip

Password: infected
ee83bc569b8fd831c17845778042ffef7f4a96f9fa54a28ab8517ff2954a1517.dll
.dll regsvr32 windows x86

Password: infected

521005caf64e14c7a762e97b4571ece5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesExW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetWindowsDirectoryW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WideCharToMultiByte
WriteConsoleW
WriteFile

ole32

CoRevokeMallocSpy

Exports

Exports

DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 557KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

521005caf64e14c7a762e97b4571ece5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

Exports

Exports

Sections

.text Size: 557KB - Virtual size: 556KB

.data Size: 2KB - Virtual size: 4KB

.00cfg Size: 512B - Virtual size: 8B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 557KB - Virtual size: 556KB

.data
Size: 2KB - Virtual size: 4KB

.00cfg
Size: 512B - Virtual size: 8B

.reloc
Size: 5KB - Virtual size: 4KB