General

Malware Config

Signatures

Files

• 301bc4b4d528b7480f88fae10a069c71fb6ad27c71a445c7c2f520ecb193de52

  .dll windows:6 windows x86 arch:x86

  a629028056c437f08f7343d2eecb037e

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  commondatasetbase

  ?GetModuleDir@Environment@common@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAX@Z

  ?CopyLen@StringHelper@common@@YA_NPADIPBDZZ

  ?GUIDToString@GUIDHelper@common@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABUtag_GUID@2@@Z

  ?CreateGUID@GUIDHelper@common@@SA_NAAUtag_GUID@2@@Z

  ??0BinaryReader@common@@QAE@XZ

  kernel32

  GetProcAddress

  FileTimeToDosDateTime

  FindFirstFileW

  FindClose

  FileTimeToLocalFileTime

  MultiByteToWideChar

  FreeLibrary

  LoadLibraryA

  DecodePointer

  IsDebuggerPresent

  IsProcessorFeaturePresent

  QueryPerformanceCounter

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  GetTickCount64

  EncodePointer

  DisableThreadLibraryCalls

  msvcp110

  ??0id@locale@std@@QAE@I@Z

  ?_Xlength_error@std@@YAXPBD@Z

  ?_Xout_of_range@std@@YAXPBD@Z

  ?_Xbad_alloc@std@@YAXXZ

  ?_Syserror_map@std@@YAPBDH@Z

  ?_Winerror_map@std@@YAPBDH@Z

  ?_Orphan_all@_Container_base0@std@@QAEXXZ

  msvcr110

  malloc

  realloc

  ?what@exception@std@@UBEPBDXZ

  ??1exception@std@@UAE@XZ

  ??0exception@std@@QAE@ABQBD@Z

  ??0exception@std@@QAE@ABV01@@Z

  tolower

  _wassert

  _lock

  _unlock

  _calloc_crt

  __dllonexit

  _onexit

  ??1type_info@@UAE@XZ

  __CppXcptFilter

  _amsg_exit

  _malloc_crt

  _initterm

  _initterm_e

  _crt_debugger_hook

  __crtUnhandledException

  __crtTerminateProcess

  _except_handler4_common

  ?terminate@@YAXXZ

  __clean_type_info_names_internal

  free

  memchr

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  _purecall

  memmove

  memcpy

  memcmp

  _CxxThrowException

  __CxxFrameHandler3

  __RTDynamicCast

  _libm_sse2_cos_precise

  memset

  Exports

  Exports

  CreateOriginalDataFormater

  FreeFileHandle

  Sections

  .text

  Size: 151KB - Virtual size: 151KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 112KB - Virtual size: 112KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 872B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ