T7htf3[.]dat[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

T7htf3.dat.dll
Size

276KB
MD5

273de44b6e06b677330f58f3cff7faf6
SHA1

863b20868100b5f412ddae2d248dd04927c63e4e
SHA256

f3d6044c9d3a6360b0d86654c4324fd573c1483565d81d73153319d36a8c09a9
SHA512

3876c379dd9dc627253ffb18953ed6df749618ad2b99bf0816c78ce2ea254727189b3288720d031ce82b2a7402c93533970fce20a1b4f6e5359efc123caf7f0b
SSDEEP

6144:tIp4Y1c1tGUGHGJksYOFGwTwRqWzUTMfVHqpdtIr:tIp4Y1vHGJNtF5TwRqWzU9dg

Score

1^/10

Malware Config

Signatures

Files

T7htf3.dat.dll
.dll windows x86

db8fd5361891a3741dbe3981eae330f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateEventA
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetTickCount
GetVersion
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetEvent
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_amsg_exit
_beginthreadex
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
malloc
memcmp
memcpy
memmove
memset
realloc
strlen
strncmp
vfprintf

Exports

Exports

Uzma_alone_decoder
Uzma_alone_encoder
Uzma_auto_decoder
Uzma_block_buffer_bound
Uzma_block_buffer_decode
Uzma_block_buffer_encode
Uzma_block_compressed_size
Uzma_block_decoder
Uzma_block_encoder
Uzma_block_header_decode
Uzma_block_header_encode
Uzma_block_header_size
Uzma_block_total_size
Uzma_block_uncomp_encode
Uzma_block_unpadded_size
Uzma_check_is_supported
Uzma_check_size
Uzma_code
Uzma_cputhreads
Uzma_crc32
Uzma_crc64
Uzma_easy_buffer_encode
Uzma_easy_decoder_memusage
Uzma_easy_encoder
Uzma_easy_encoder_memusage
Uzma_end
Uzma_filter_decoder_is_supported
Uzma_filter_encoder_is_supported
Uzma_filter_flags_decode
Uzma_filter_flags_encode
Uzma_filter_flags_size
Uzma_filters_copy
Uzma_filters_update
Uzma_get_check
Uzma_get_progress
Uzma_index_append
Uzma_index_block_count
Uzma_index_buffer_decode
Uzma_index_buffer_encode
Uzma_index_cat
Uzma_index_checks
Uzma_index_decoder
Uzma_index_dup
Uzma_index_encoder
Uzma_index_end
Uzma_index_file_size
Uzma_index_hash_append
Uzma_index_hash_decode
Uzma_index_hash_end
Uzma_index_hash_init
Uzma_index_hash_size
Uzma_index_init
Uzma_index_iter_init
Uzma_index_iter_locate
Uzma_index_iter_next
Uzma_index_iter_rewind
Uzma_index_memusage
Uzma_index_memused
Uzma_index_size
Uzma_index_stream_count
Uzma_index_stream_flags
Uzma_index_stream_padding
Uzma_index_stream_size
Uzma_index_total_size
Uzma_index_uncompressed_size
Uzma_lzma_preset
Uzma_memlimit_get
Uzma_memlimit_set
Uzma_memusage
Uzma_mf_is_supported
Uzma_mode_is_supported
Uzma_physmem
Uzma_properties_decode
Uzma_properties_encode
Uzma_properties_size
Uzma_raw_buffer_decode
Uzma_raw_buffer_encode
Uzma_raw_decoder
Uzma_raw_decoder_memusage
Uzma_raw_encoder
Uzma_raw_encoder_memusage
Uzma_stream_buffer_bound
Uzma_stream_buffer_decode
Uzma_stream_buffer_encode
Uzma_stream_decoder
Uzma_stream_encoder
Uzma_stream_encoder_mt
Uzma_stream_encoder_mt_memusage
Uzma_stream_flags_compare
Uzma_stream_footer_decode
Uzma_stream_footer_encode
Uzma_stream_header_decode
Uzma_stream_header_encode
Uzma_version_number
Uzma_version_string
Uzma_vli_decode
Uzma_vli_encode
X555

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 140B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db8fd5361891a3741dbe3981eae330f2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 105KB - Virtual size: 105KB

.data Size: 512B - Virtual size: 40B

.rdata Size: 30KB - Virtual size: 30KB

/4 Size: 21KB - Virtual size: 20KB

.bss Size: - Virtual size: 140B

.edata Size: 3KB - Virtual size: 3KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 108KB - Virtual size: 105KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 105KB - Virtual size: 105KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 30KB - Virtual size: 30KB

/4
Size: 21KB - Virtual size: 20KB

.bss
Size: - Virtual size: 140B

.edata
Size: 3KB - Virtual size: 3KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 108KB - Virtual size: 105KB

.reloc
Size: 2KB - Virtual size: 1KB