cf3c35ec95346ba96533c3ff291697d8068eaf791ba73c5555155f21abb4e4bb

Sharing

Copy URL Twitter E-mail

General

Target

cf3c35ec95346ba96533c3ff291697d8068eaf791ba73c5555155f21abb4e4bb
Size

272KB
MD5

68ad075eaf47760fccd959832b8898e0
SHA1

dbaa3ac17c418828ee52ded2f45eafe0cc7a6c2f
SHA256

cf3c35ec95346ba96533c3ff291697d8068eaf791ba73c5555155f21abb4e4bb
SHA512

db3594c45b5cf9913f862b58793d953189c7713f669c1c585fa1856d53688be2ab5583e38a6a0650ce52206961267bf0346668588338be9c1c60cce8d3b5d8b9
SSDEEP

6144:nP/Vt2NLKvnuqMywkk/EhLr7KNqa2X+S3MAV44BGv:nP/Vt2NLKGqMyVCEhLvRjXD3nK

Score

N/A

Malware Config

Signatures

Files

cf3c35ec95346ba96533c3ff291697d8068eaf791ba73c5555155f21abb4e4bb
.dll windows x86

4eff41a005fb149247033c4b1aa53f8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId

user32

PostMessageA
IsWindow
RegisterWindowMessageA

msvcr80

memset
isupper
isalpha
memmove
fputs
fprintf
_chdrive
toupper
atoi
strtok
fclose
fread
ftell
fseek
fopen
memcpy
realloc
__iob_func
_tempnam
remove
_setjmp3
_CIpow
tolower
vfprintf
strncmp
fgetc
sscanf
fwrite
vprintf
fflush
fsetpos
fgets
fgetpos
feof
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
strtol
sprintf
isdigit
malloc
free
longjmp
strrchr
strchr
_access
_chdir
_stricmp
isspace
_strdup

Exports

Exports

Compile
pc_addconstant
pc_addtag
pc_compile
pc_enablewarning

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4eff41a005fb149247033c4b1aa53f8e

Headers

File Characteristics

Imports

kernel32

user32

msvcr80

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 106KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 12KB - Virtual size: 9KB

.reloc Size: 12KB - Virtual size: 8KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 108KB - Virtual size: 106KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 12KB - Virtual size: 9KB

.reloc
Size: 12KB - Virtual size: 8KB

.text
Size: 112KB - Virtual size: 112KB