8c74f9d543df720a682ed8127a58b4bcec35156dc6e626be56ecee17844c4fe2

Sharing

Copy URL Twitter E-mail

General

Target

8c74f9d543df720a682ed8127a58b4bcec35156dc6e626be56ecee17844c4fe2
Size

399KB
MD5

669947d1e1215f468619a141f1881e2c
SHA1

bb8a14989caccbd0cb5f58c0de56c93146ea3b46
SHA256

8c74f9d543df720a682ed8127a58b4bcec35156dc6e626be56ecee17844c4fe2
SHA512

608bad6afe875a2bcbf72c38f58b1ddd9f755e0a9bf1ed41443ffab5de61146feeba21f8a5ce6cc22afcbf0163aaee9c56f2e51c3373650dfe2fea31166753de
SSDEEP

6144:lgtpn4ikY1nD3gzLzG5TfHpCQ/ien4pNNyEci9f7DbRCBrv5dtN64XOfO+B4bf7L:qcE8zLzaTfEwoWEl9zxaL4/kf5KYV

Score

N/A

Malware Config

Signatures

Files

8c74f9d543df720a682ed8127a58b4bcec35156dc6e626be56ecee17844c4fe2
.dll windows x86

b83b0e92f183dd4a734293bb33eb649d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
GetTickCount
GetVersion
HeapLock
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
LoadLibraryA
LoadResource
LockResource
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
GetProcessTimes
ResetEvent
RtlUnwind
SetThreadContext
SizeofResource
TerminateProcess
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualAllocEx
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteTapemark
ClearCommError
GetProcessPriorityBoost
GetProcAddress
GetModuleHandleA
GetMailslotInfo
GetLastError
GetFullPathNameW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
FreeLibrary
FindResourceA
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
DeleteTimerQueue
CreateThread
CreateMutexA
CreateFileA
CloseHandle
ReleaseMutex

ole32

CreateStreamOnHGlobal

msvcrt

floor
free
iswspace
malloc
qsort
sqrt
tolower
abort
_wfindfirsti64
_vsnprintf
_unlock
_stricmp
_mbctombb
_j0
_initterm
_finite
_atoi64
_amsg_exit
__dllonexit
__RTDynamicCast
__CxxLongjmpUnwind
_XcptFilter
_CxxThrowException
_CIsqrt
_CIcos
_CIasin
_CIacos

gdi32

GdiGetBatchLimit
GetObjectA
GetTextMetricsA
ExtTextOutW
SetBkMode
SetMapMode
SetTextAlign
DeleteDC
ExtTextOutA
CreateFontIndirectW
CreateFontIndirectA
CreateDIBSection
SelectObject
CreateCompatibleDC

dinput

DirectInputCreateA

advapi32

RegCloseKey
CreatePrivateObjectSecurity
CloseTrace
RegQueryValueExA

Exports

Exports

FromDoubles
HasAttrString
LocalsToFast
String_Type

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 241KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b83b0e92f183dd4a734293bb33eb649d

Headers

File Characteristics

Imports

kernel32

ole32

msvcrt

gdi32

dinput

advapi32

Exports

Exports

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 241KB - Virtual size: 240KB

.data Size: 70KB - Virtual size: 71KB

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 241KB - Virtual size: 240KB

.data
Size: 70KB - Virtual size: 71KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 4KB - Virtual size: 3KB