3988c4974d837ec5c9563a7946e38586

Sharing

Copy URL

Twitter E-mail

General

Target

3988c4974d837ec5c9563a7946e38586
Size

276KB
MD5

3988c4974d837ec5c9563a7946e38586
SHA1

4c810be8c1f0e6099aa48778eac6dbbefbc221d3
SHA256

f63273020a405bcbfad41a0b81b5b14cf30fb793e70c52d4f24c86a0878eed18
SHA512

ad6181552c826893865d4336ac31fec29c1d76687685816c4fea0dea3079fb42d35f2f22bf078c6cd772698fff8a68516cc7b5db51f8fe849a1077b8b8cf3705
SSDEEP

6144:tIp4Y1c1tGUGHGJksYOFGwTwRqWzUTMfVHqpdtIk:tIp4Y1vHGJNtF5TwRqWzU9dv

Score

1^/10

Malware Config

Signatures

Files

3988c4974d837ec5c9563a7946e38586
.dll windows x86

db8fd5361891a3741dbe3981eae330f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateEventA
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetTickCount
GetVersion
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetEvent
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_amsg_exit
_beginthreadex
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
malloc
memcmp
memcpy
memmove
memset
realloc
strlen
strncmp
vfprintf

Exports

Exports

Uzma_alone_decoder
Uzma_alone_encoder
Uzma_auto_decoder
Uzma_block_buffer_bound
Uzma_block_buffer_decode
Uzma_block_buffer_encode
Uzma_block_compressed_size
Uzma_block_decoder
Uzma_block_encoder
Uzma_block_header_decode
Uzma_block_header_encode
Uzma_block_header_size
Uzma_block_total_size
Uzma_block_uncomp_encode
Uzma_block_unpadded_size
Uzma_check_is_supported
Uzma_check_size
Uzma_code
Uzma_cputhreads
Uzma_crc32
Uzma_crc64
Uzma_easy_buffer_encode
Uzma_easy_decoder_memusage
Uzma_easy_encoder
Uzma_easy_encoder_memusage
Uzma_end
Uzma_filter_decoder_is_supported
Uzma_filter_encoder_is_supported
Uzma_filter_flags_decode
Uzma_filter_flags_encode
Uzma_filter_flags_size
Uzma_filters_copy
Uzma_filters_update
Uzma_get_check
Uzma_get_progress
Uzma_index_append
Uzma_index_block_count
Uzma_index_buffer_decode
Uzma_index_buffer_encode
Uzma_index_cat
Uzma_index_checks
Uzma_index_decoder
Uzma_index_dup
Uzma_index_encoder
Uzma_index_end
Uzma_index_file_size
Uzma_index_hash_append
Uzma_index_hash_decode
Uzma_index_hash_end
Uzma_index_hash_init
Uzma_index_hash_size
Uzma_index_init
Uzma_index_iter_init
Uzma_index_iter_locate
Uzma_index_iter_next
Uzma_index_iter_rewind
Uzma_index_memusage
Uzma_index_memused
Uzma_index_size
Uzma_index_stream_count
Uzma_index_stream_flags
Uzma_index_stream_padding
Uzma_index_stream_size
Uzma_index_total_size
Uzma_index_uncompressed_size
Uzma_lzma_preset
Uzma_memlimit_get
Uzma_memlimit_set
Uzma_memusage
Uzma_mf_is_supported
Uzma_mode_is_supported
Uzma_physmem
Uzma_properties_decode
Uzma_properties_encode
Uzma_properties_size
Uzma_raw_buffer_decode
Uzma_raw_buffer_encode
Uzma_raw_decoder
Uzma_raw_decoder_memusage
Uzma_raw_encoder
Uzma_raw_encoder_memusage
Uzma_stream_buffer_bound
Uzma_stream_buffer_decode
Uzma_stream_buffer_encode
Uzma_stream_decoder
Uzma_stream_encoder
Uzma_stream_encoder_mt
Uzma_stream_encoder_mt_memusage
Uzma_stream_flags_compare
Uzma_stream_footer_decode
Uzma_stream_footer_encode
Uzma_stream_header_decode
Uzma_stream_header_encode
Uzma_version_number
Uzma_version_string
Uzma_vli_decode
Uzma_vli_encode
X555

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 140B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db8fd5361891a3741dbe3981eae330f2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 105KB - Virtual size: 105KB

.data Size: 512B - Virtual size: 40B

.rdata Size: 30KB - Virtual size: 30KB

/4 Size: 21KB - Virtual size: 20KB

.bss Size: - Virtual size: 140B

.edata Size: 3KB - Virtual size: 3KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 108KB - Virtual size: 105KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 105KB - Virtual size: 105KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 30KB - Virtual size: 30KB

/4
Size: 21KB - Virtual size: 20KB

.bss
Size: - Virtual size: 140B

.edata
Size: 3KB - Virtual size: 3KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 108KB - Virtual size: 105KB

.reloc
Size: 2KB - Virtual size: 1KB