How to remove bootImgCVT.dll
- File Details
- Overview
- Analysis
bootImgCVT.dll
The module bootImgCVT.dll has been detected as Worm.Ramnit
File Details
| MD5: |
0ae7180d59865114977800f03ef47317 |
| Size: |
1 MB |
| First Published: |
2017-05-24 14:04:10 (6 years ago) |
| Latest Published: |
2017-05-24 14:04:10 (6 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-05-24 14:04:10 (6 years ago) |
| %desktop%\volcano\spd_vol |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00143000 |
| Name |
Size of data |
MD5 |
| .text |
764416 |
c12bdd7925a358dd22c87521136ecf26 |
| .data |
62464 |
accd1ba62f77a3b70995f5b1e91a7972 |
| .tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
| .idata |
10752 |
e8812a2dbee53216cdcbd8ba96bd7605 |
| .edata |
512 |
bcd987bec96cb0e5b543f6fce697b83c |
| .rsrc |
390656 |
f32a8ec510471888140fc9f38502462e |
| .reloc |
45568 |
f25229af6eeb88b32b0881f51c0cb081 |
| .text |
139264 |
c67ee0d688949032a69a9c81fad498ca |
