c857783239a8d18f3062978bd8336404668355038fa271fc7845780fa0afa6f2

Sharing

Copy URL Twitter E-mail

General

Target

c857783239a8d18f3062978bd8336404668355038fa271fc7845780fa0afa6f2
Size

426KB
MD5

3f7a424228ad8dfdf59cd768ab95b46c
SHA1

7f0b265679026749b3b3fae2f966e83af6dedade
SHA256

c857783239a8d18f3062978bd8336404668355038fa271fc7845780fa0afa6f2
SHA512

72f6770f60be80e2012282eb2ab79d9619fd98231ee0d4a3685c62e51eeeb1ee4ddf18044a915acb6599f2bdbf0b2b522ae3da3a1e5fc7a02e1b7e6d3288c66a
SSDEEP

12288:42zXd3IRaH96f5eX0gpyddbU/9VbchRJBq4AAq:42bd3IR3C0QQdbO9VbchRG4Nq

Score

N/A

Malware Config

Signatures

Files

c857783239a8d18f3062978bd8336404668355038fa271fc7845780fa0afa6f2
.dll windows x86

b0ba70c316c8b27b19d0489a4c24566d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
RtlUnwind
RtlZeroMemory
SetFilePointerEx
SetThreadContext
LoadResource
SizeofResource
TerminateProcess
TryEnterCriticalSection
VirtualAlloc
WaitForMultipleObjects
WaitForSingleObject
WriteTapemark
_hread
LoadLibraryA
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedExchange
InterlockedCompareExchange
CloseHandle
GetVersion
GetTickCount
GetSystemTimeAsFileTime
GetProcessPriorityBoost
GetModuleHandleA
GetLastError
GetDevicePowerState
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
FreeLibrary
FlushFileBuffers
FindResourceA
ExitProcess
EnterCriticalSection
CreateMutexA
SetupComm

dinput

DirectInputCreateA

ole32

CreateStreamOnHGlobal

advapi32

CloseTrace
RegCloseKey
RegEnumKeyExA
LsaClose

gdi32

ExtTextOutA
DeleteObject
DeleteDC
CreateFontIndirectW
GdiGetBatchLimit
CreateDIBSection
CreateCompatibleDC
CloseFigure
GetObjectA
GetTextMetricsA
GetTextMetricsW
SelectObject
SetTextAlign
SetBkMode
CreateFontIndirectA
SetMapMode

msvcrt

_ismbclower
wcsncpy
_CIcos
_CIsqrt
_CxxThrowException
_XcptFilter
__CxxLongjmpUnwind
__RTDynamicCast
__dllonexit
__p__winver
_amsg_exit
_atoi64
_finite
_gcvt
_initterm
_j0
_mbsicoll
_mbsncat
_stricmp
_unlock
_vsnprintf
floor
free
iswspace
malloc
sqrt
tolower

Exports

Exports

CheckSignals
IndentationError
SetTrace
String_Fini
WarnEx
_Clear
set_filter
set_sPLT
vInit

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0ba70c316c8b27b19d0489a4c24566d

Headers

File Characteristics

Imports

kernel32

dinput

ole32

advapi32

gdi32

msvcrt

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 79KB

.rdata Size: 249KB - Virtual size: 248KB

.data Size: 69KB - Virtual size: 71KB

.rsrc Size: 21KB - Virtual size: 21KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 80KB - Virtual size: 79KB

.rdata
Size: 249KB - Virtual size: 248KB

.data
Size: 69KB - Virtual size: 71KB

.rsrc
Size: 21KB - Virtual size: 21KB

.reloc
Size: 5KB - Virtual size: 5KB