General

Malware Config

Signatures

Files

• 8d84152b69161bf5abb2f80fef310ec92cc8b1cb23dff18eebd8d039cda8f8ad

  .dll windows:6 windows x64 arch:x64

  ce543b95297c6bb89c2576e9105d106b

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  bcrypt

  BCryptGenRandom

  kernel32

  GetProcAddress

  TlsGetValue

  TlsSetValue

  FormatMessageW

  GetModuleHandleW

  GetLastError

  SetLastError

  GetCurrentDirectoryW

  ReleaseSRWLockExclusive

  TlsAlloc

  AcquireSRWLockExclusive

  GetCurrentProcess

  GetCurrentThread

  RtlCaptureContext

  CreateMutexA

  WaitForSingleObjectEx

  CloseHandle

  RtlLookupFunctionEntry

  ReleaseMutex

  LoadLibraryA

  GetStdHandle

  GetConsoleMode

  WriteFile

  WriteConsoleW

  GetEnvironmentVariableW

  ReleaseSRWLockShared

  AcquireSRWLockShared

  DeleteCriticalSection

  LeaveCriticalSection

  FreeEnvironmentStringsW

  FindClose

  CreateFileW

  GetEnvironmentStringsW

  GetModuleFileNameW

  GetCommandLineW

  SetFilePointerEx

  FlushFileBuffers

  FindNextFileW

  InitializeCriticalSection

  GetModuleHandleA

  GetCurrentProcessId

  TerminateProcess

  ExitProcess

  QueryPerformanceCounter

  GetSystemTimeAsFileTime

  HeapFree

  HeapAlloc

  GetProcessHeap

  HeapReAlloc

  GetConsoleOutputCP

  SetStdHandle

  HeapSize

  GetStringTypeW

  GetFileType

  LCMapStringW

  WideCharToMultiByte

  MultiByteToWideChar

  GetCommandLineA

  GetCPInfo

  GetOEMCP

  GetACP

  IsValidCodePage

  FindFirstFileExW

  GetModuleHandleExW

  LoadLibraryExW

  FreeLibrary

  TlsFree

  InitializeCriticalSectionAndSpinCount

  EncodePointer

  InterlockedFlushSList

  EnterCriticalSection

  RaiseException

  RtlPcToFileHeader

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsProcessorFeaturePresent

  GetCurrentThreadId

  InitializeSListHead

  IsDebuggerPresent

  GetStartupInfoW

  RtlUnwindEx

  user32

  GetWindowRect

  ReleaseDC

  GetDC

  Exports

  Exports

  DataRefuse

  DllMain

  aszuhzyffmvvarhte

  aztbvtvwujtyui

  bxbzfgs

  dymbuzk

  flhuasdsqo

  fwefwf

  fznajwdgbqdlpgjlr

  hbxjbuccrqdmyv

  ibqrvneccuuk

  iymmloemldqlbsu

  kazptmlzarruknlsx

  kqnohapnznniuic

  kttepksgwjlf

  kuilioli

  lfbvvcdq

  mhnfnf

  nevdzwgbmuy

  ngivool

  oboqpvdsvdix

  odyqeureek

  oneasfi

  opopoiii

  oqncgsgcqzgqvlj

  ovsijcyrykxafnyee

  rsqnolucysodtkc

  rtrwrw

  rust_eh_personality

  rzdtssx

  tnvtttguraw

  unpgnildqtr

  uxijgxntoyscfxipg

  vaqebcy

  xprrpxr

  ysmplmgloqxhuukoh

  zfeymeevbwxapki

  zhsfpefbvt

  Sections

  .text

  Size: 932KB - Virtual size: 931KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 600KB - Virtual size: 600KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 64KB - Virtual size: 63KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .pdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  _RDATA

  Size: 512B - Virtual size: 252B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ