f03a41659e9fb200bbfdfbf941173b7968bff2a0e9b223606d9186cff859118e

Sharing

Copy URL Twitter E-mail

General

Target

f03a41659e9fb200bbfdfbf941173b7968bff2a0e9b223606d9186cff859118e
Size

202KB
MD5

ae4b8ef8ef0a06d31298c0f65ae6d75d
SHA1

5dc2df62011e7343ded798e94bfa03c1303384bf
SHA256

f03a41659e9fb200bbfdfbf941173b7968bff2a0e9b223606d9186cff859118e
SHA512

01037a87bd69b6ed955265c75f5590b0b61d25cb754028ccbc9591b53fc87c23a97b10962e40907f4e85c11e10254418d479076da4ba8d3db60ad47a70d5ef9d
SSDEEP

3072:2ZUGBv4NTIp2EG1jy1MbcYlmx8fhbi9vLV5b7MOvYQfGrg1WBn1vIdYQ2c4P/P6V:PGBAnNgj+A97MzIGNJljcA1BTZMZ

Score

N/A

Malware Config

Signatures

Files

f03a41659e9fb200bbfdfbf941173b7968bff2a0e9b223606d9186cff859118e
.dll windows x86

f4f71f9e72b0d1063528989ca1132e56

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

pow
cos
rand
sin
log
strlen
strncmp
memchr
strcmp
??3@YAXPAX@Z
memset
strcpy
sqrt
free
_adjust_fdiv
_initterm
floor
calloc
_CIpow
fabs
??2@YAPAXI@Z
isalnum
sprintf
strncpy
srand
realloc
malloc
memmove
ceil
memcpy
exp
_purecall

kernel32

FlushInstructionCache
SetLastError
GetSystemInfo
VirtualAlloc
VirtualProtect
DeviceIoControl
CloseHandle
CreateFileA
SetPriorityClass
GetCurrentProcess
GetVersionExA
DisableThreadLibraryCalls
MulDiv
HeapAlloc
GetProcessHeap
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcatA
lstrcpyA
lstrlenA
GetModuleFileNameA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapFree
GetVersion

iphlpapi

GetAdaptersInfo

user32

RemovePropA
SetPropA
GetClientRect
GetWindowLongA
FillRect
GetSysColor
DrawFrameControl
SetRect
GetSystemMetrics
GetSysColorBrush
DrawEdge
GetWindowRect
GetParent
OffsetRect
GetWindowDC
ReleaseDC
CopyRect
MapWindowPoints
CallWindowProcA
PtInRect
SetCapture
SetTimer
KillTimer
ReleaseCapture
GetMessagePos
ScreenToClient
GetCursorPos
ShowScrollBar
SetWindowLongA
SetScrollInfo
SetScrollPos
GetScrollRange
GetScrollPos
GetScrollInfo
EnableScrollBar
SendMessageA
SetWindowPos
GetPropA
MessageBoxA
SetScrollRange

gdi32

ExtTextOutA
CreatePatternBrush
SetBrushOrgEx
PatBlt
CreateCompatibleDC
CreateBitmap
UnrealizeObject
SelectObject
CreateCompatibleBitmap
SetBkColor
BitBlt
GetStockObject
SetTextColor
DeleteObject
DeleteDC

Exports

Exports

_resetstkoflw
_set_security_error_handler
lrand48
srand48
ttpcomm_getversion

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4f71f9e72b0d1063528989ca1132e56

Headers

File Characteristics

Imports

msvcrt

kernel32

iphlpapi

user32

gdi32

Exports

Exports

Sections

.text Size: 145KB - Virtual size: 144KB

text Size: 512B - Virtual size: 119B

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 26KB - Virtual size: 150KB

.tls Size: 512B - Virtual size: 28B

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 145KB - Virtual size: 144KB

text
Size: 512B - Virtual size: 119B

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 26KB - Virtual size: 150KB

.tls
Size: 512B - Virtual size: 28B

.reloc
Size: 8KB - Virtual size: 8KB