f54a41145b732d47d4a2b0a1c6e811ddcba48558[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

f54a41145b732d47d4a2b0a1c6e811ddcba48558.dll
Size

297KB
MD5

623a18dc5a76e4722efe6a9032476306
SHA1

bfe8dfa574a56b16959ecd47a80d702608b16820
SHA256

6d5be3e6939a7c86280044eebe71c566b48981a3341193aa3aff634a3a5d1bbd
SHA512

9915eada6b8e5d1893af5adb37b3a05d8ecb5223c8c85328480fa999899a226f55a51ed0b2d7950478346a8cc685df9a7b1f25fb982e083fd53b4aa31c7d1170
SSDEEP

6144:jHX8pR0HPJfMPQ/qRTatX9i+ph193u1A0huvSFVb8XqcYte:jHsEBfEQ//RY+phe1A0USFVgXqcqe

Score

1^/10

Malware Config

Signatures

Files

f54a41145b732d47d4a2b0a1c6e811ddcba48558.dll
.dll windows x64

b095cf677389cb2f1b84e81909252fdf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
CloseHandle
GetProcAddress
GetModuleHandleA
ExitProcess
FlsGetValue
TlsFree
FlsFree
SetLastError
TlsSetValue
FlsAlloc
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
CreateFileW
InitializeCriticalSection
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlVirtualUnwind
RtlLookupFunctionEntry
SetFilePointer
SetEndOfFile
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA

advapi32

CryptReleaseContext
CryptDecrypt
CryptAcquireContextW
CryptSetKeyParam
CryptImportKey
CryptDestroyKey

Exports

Exports

SpLsaModeInitialize

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 219KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b095cf677389cb2f1b84e81909252fdf

Headers

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 219KB - Virtual size: 227KB

.pdata Size: 3KB - Virtual size: 3KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 219KB - Virtual size: 227KB

.pdata
Size: 3KB - Virtual size: 3KB

.reloc
Size: 1KB - Virtual size: 1KB