Iq3x8aDXWF[.]dat

Sharing

Copy URL Twitter E-mail

General

Target

Iq3x8aDXWF.dat
Size

276KB
MD5

20c4c67957308b8ab745c1dfce6f5a74
SHA1

a1fc22bf580aaab91c75473bcfe1f023c21e3587
SHA256

2dabadfbf69f447b4aa55ee9ed435bfe999ec47fa25140ea3ac7e0e4f9d7013e
SHA512

d89af76283d532f961565a03ede286cdf64e8c232edc38324494d825e89de5a928d2bb3bddb71daa33b2b78920448565474c4807b3c86c0bbc2270e35b8b5899
SSDEEP

6144:tIp4Y1c1tGUGHGJksYOFGwTwRqWzUTMfVHqpdtIY:tIp4Y1vHGJNtF5TwRqWzU9d7

Score

1^/10

Malware Config

Signatures

Files

Iq3x8aDXWF.dat
.dll windows x86

db8fd5361891a3741dbe3981eae330f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateEventA
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetTickCount
GetVersion
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetEvent
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_amsg_exit
_beginthreadex
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
malloc
memcmp
memcpy
memmove
memset
realloc
strlen
strncmp
vfprintf

Exports

Exports

Uzma_alone_decoder
Uzma_alone_encoder
Uzma_auto_decoder
Uzma_block_buffer_bound
Uzma_block_buffer_decode
Uzma_block_buffer_encode
Uzma_block_compressed_size
Uzma_block_decoder
Uzma_block_encoder
Uzma_block_header_decode
Uzma_block_header_encode
Uzma_block_header_size
Uzma_block_total_size
Uzma_block_uncomp_encode
Uzma_block_unpadded_size
Uzma_check_is_supported
Uzma_check_size
Uzma_code
Uzma_cputhreads
Uzma_crc32
Uzma_crc64
Uzma_easy_buffer_encode
Uzma_easy_decoder_memusage
Uzma_easy_encoder
Uzma_easy_encoder_memusage
Uzma_end
Uzma_filter_decoder_is_supported
Uzma_filter_encoder_is_supported
Uzma_filter_flags_decode
Uzma_filter_flags_encode
Uzma_filter_flags_size
Uzma_filters_copy
Uzma_filters_update
Uzma_get_check
Uzma_get_progress
Uzma_index_append
Uzma_index_block_count
Uzma_index_buffer_decode
Uzma_index_buffer_encode
Uzma_index_cat
Uzma_index_checks
Uzma_index_decoder
Uzma_index_dup
Uzma_index_encoder
Uzma_index_end
Uzma_index_file_size
Uzma_index_hash_append
Uzma_index_hash_decode
Uzma_index_hash_end
Uzma_index_hash_init
Uzma_index_hash_size
Uzma_index_init
Uzma_index_iter_init
Uzma_index_iter_locate
Uzma_index_iter_next
Uzma_index_iter_rewind
Uzma_index_memusage
Uzma_index_memused
Uzma_index_size
Uzma_index_stream_count
Uzma_index_stream_flags
Uzma_index_stream_padding
Uzma_index_stream_size
Uzma_index_total_size
Uzma_index_uncompressed_size
Uzma_lzma_preset
Uzma_memlimit_get
Uzma_memlimit_set
Uzma_memusage
Uzma_mf_is_supported
Uzma_mode_is_supported
Uzma_physmem
Uzma_properties_decode
Uzma_properties_encode
Uzma_properties_size
Uzma_raw_buffer_decode
Uzma_raw_buffer_encode
Uzma_raw_decoder
Uzma_raw_decoder_memusage
Uzma_raw_encoder
Uzma_raw_encoder_memusage
Uzma_stream_buffer_bound
Uzma_stream_buffer_decode
Uzma_stream_buffer_encode
Uzma_stream_decoder
Uzma_stream_encoder
Uzma_stream_encoder_mt
Uzma_stream_encoder_mt_memusage
Uzma_stream_flags_compare
Uzma_stream_footer_decode
Uzma_stream_footer_encode
Uzma_stream_header_decode
Uzma_stream_header_encode
Uzma_version_number
Uzma_version_string
Uzma_vli_decode
Uzma_vli_encode
X555

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 140B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db8fd5361891a3741dbe3981eae330f2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 105KB - Virtual size: 105KB

.data Size: 512B - Virtual size: 40B

.rdata Size: 30KB - Virtual size: 30KB

/4 Size: 21KB - Virtual size: 20KB

.bss Size: - Virtual size: 140B

.edata Size: 3KB - Virtual size: 3KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 108KB - Virtual size: 105KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 105KB - Virtual size: 105KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 30KB - Virtual size: 30KB

/4
Size: 21KB - Virtual size: 20KB

.bss
Size: - Virtual size: 140B

.edata
Size: 3KB - Virtual size: 3KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 108KB - Virtual size: 105KB

.reloc
Size: 2KB - Virtual size: 1KB