How to remove RSCNOL22.DLL
- File Details
- Overview
- Analysis
RSCNOL22.DLL
The module RSCNOL22.DLL has been detected as Worm.Ramnit
File Details
Product Name: |
|
Company Name: |
|
MD5: |
76241f7f06e253197d273e755b0ef18f |
Size: |
182 KB |
First Published: |
2017-09-07 17:11:58 (7 years ago) |
Latest Published: |
2017-09-07 17:11:58 (7 years ago) |
Status: |
Worm.Ramnit (on last analysis) |
|
Analysis Date: |
2017-09-07 17:11:58 (7 years ago) |
%sysdrive%\vb60\visual basic 6.0\common\tools\vs-ent98\vmodeler |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x0e200000 |
Entry Address: |
0x00013000 |
Name |
Size of data |
MD5 |
.text |
18944 |
e21f05110d07a8932c53cb1cdc2c0806 |
SFX_INIT |
1024 |
9c229e9668eb2e9d6c9f832601cfce05 |
SFX_DBG1 |
512 |
9aaa966aa3deecc84305cc96f9117ac0 |
SFX_DBG2 |
512 |
81f0a5f4edc5bc13d1fd0a151ed25e40 |
SFX_AUX |
512 |
eec7416b50ff1eeb58a5f0d90526c064 |
SFX_CORE |
1024 |
f534e34ca438cd20bb40bf6ddf29a681 |
SFX_TERM |
512 |
9e990283afeaf128ea38e3599d93eb25 |
.rdata |
2048 |
f3eb9a4c66e2ee2a848a340674ad88b0 |
.data |
4608 |
336407fbe6be42f0ac0ff552b2ff6767 |
.idata |
2048 |
2c91f774a040b13954ba114b08045f5c |
.rsrc |
1024 |
a096c2e184ec2c1309244ee1f6fb3653 |
.reloc |
2048 |
d817acc6d8c4f3116f438078fb6f8d0d |
.text |
150528 |
f97c30e240447d9c5591907d2574a75a |