66584cb9701d8f05f041a525d79ea8ad66d3d1a05a52b6c50bb65de26fa6e087

Sharing

Copy URL Twitter E-mail

General

Target

66584cb9701d8f05f041a525d79ea8ad66d3d1a05a52b6c50bb65de26fa6e087
Size

244KB
MD5

6643f0526d88808b2cdc36d55b6e66d0
SHA1

ed2ac8acb165b3d2443607bbd96ef0e15ec0e770
SHA256

66584cb9701d8f05f041a525d79ea8ad66d3d1a05a52b6c50bb65de26fa6e087
SHA512

3118653d441003904e023a0eaf52f2d6cbd47b28f1d7de8ce87b28c8920211ea2de598994709efbd644be09ee6838c113ff00b75bbc1061b4eeb836420c6fc4f
SSDEEP

3072:rvuhCm2oMU6X8rKGQuNJrlGTdsm5Wux3ShesuujwvEvEzJ9aCxfb//C3X0vCcUL:rgCvoMCKDTCJEaOLCnL

Score

N/A

Malware Config

Signatures

Files

66584cb9701d8f05f041a525d79ea8ad66d3d1a05a52b6c50bb65de26fa6e087
.exe windows x86

3538d760deb50d092119b35a9c722f67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
GetProcAddress
LoadLibraryA
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetFileType
SetFilePointer
MultiByteToWideChar
VirtualProtect
GetSystemInfo
VirtualQuery
RtlUnwind
GetStringTypeA
GetStringTypeW
GetCPInfo
GetOEMCP
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
ReadFile
LCMapStringA
LCMapStringW
FlushFileBuffers
CloseHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
FindResourceExA
LoadResource
SetLastError
CreateThread
GetVersionExA
DeleteCriticalSection
GetLastError
InterlockedExchange
GetACP
CreateEventA
InitializeCriticalSection
SleepEx
GetLocaleInfoA
SetHandleCount
lstrlenA

user32

GetMessageA
SetActiveWindow
SetForegroundWindow
EnumDisplaySettingsA
SetFocus
SendMessageA
IsDialogMessageA
TranslateMessage
GetWindowTextA
MessageBoxA
BringWindowToTop
CreateDialogParamA
LoadStringA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
LoadCursorA
DialogBoxParamA
CreateWindowExA
UnregisterClassA
GetDlgItem
EndDialog
DefWindowProcA
ShowWindow
PostMessageA
wvsprintfA
wsprintfA
DestroyWindow
DispatchMessageA
SetWindowTextA
RegisterClassA
SetCursor

gdi32

GetStockObject

advapi32

RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey

ddraw

DirectDrawCreate
DirectDrawEnumerateA

storm

ord501
ord252
ord253
ord269
ord403
ord401
ord267
ord266

fog

ord10022
ord10019
ord10029
gdwBitMasks
gdwInvBitMasks

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3538d760deb50d092119b35a9c722f67

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ddraw

storm

fog

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 8KB - Virtual size: 27KB

.rsrc Size: 148KB - Virtual size: 148KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 8KB - Virtual size: 27KB

.rsrc
Size: 148KB - Virtual size: 148KB