430f6d267d27530ea8f41b3d1f2c943cdc6771f1ba6e2ee3c3a62fe16c7f60e0

General

Target

430f6d267d27530ea8f41b3d1f2c943cdc6771f1ba6e2ee3c3a62fe16c7f60e0
Size

100KB
MD5

28c207913ea92ca9b81148c658952692
SHA1

b20038a8acadd6e34c3355cc5da9f3fcb8bc1e5e
SHA256

430f6d267d27530ea8f41b3d1f2c943cdc6771f1ba6e2ee3c3a62fe16c7f60e0
SHA512

521a3fa9f46ba7baaa7a450cd938b7d555501e33db5b2ddbb555a24e604b64ca538a31cd4e426a7ab48e93664b51792a48d087b4f6c13421aab615d1a5a1ecbd
SSDEEP

1536:tIBrqlUXG1+dLuOte4AgBistBX4AhCC5MDCzG+AA1bcT:GBkUW1+5e5gBVh4yZMDTPD

Score

N/A

Malware Config

Signatures

Files

430f6d267d27530ea8f41b3d1f2c943cdc6771f1ba6e2ee3c3a62fe16c7f60e0
.dll windows x86

ac3d2d726818ec7749c821e9ab922181

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vsnprintf
tolower
_except_handler3
_stricmp
malloc
printf
exit
wcsstr
wcscpy
wcsncat
wcslen
time
srand
rand
mbstowcs
fopen
fseek
ftell
fclose
wcscmp
free
sprintf
strcpy
strrchr
strcat
strchr
memset
strncpy
strstr
strlen
atoi
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy
_strcmpi
_strupr

gdi32

GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
DeleteDC
CreateDCA

kernel32

SetThreadContext
Thread32Next
EnterCriticalSection
LeaveCriticalSection
VirtualProtect
FlushInstructionCache
InitializeCriticalSection
AddVectoredExceptionHandler
GetModuleHandleA
SetFilePointer
CreateFileA
GetFileSize
ReadFile
GetThreadContext
VirtualQueryEx
ReadProcessMemory
GetFileAttributesW
CloseHandle
GetTempPathA
GetProcAddress
FreeLibrary
IsBadReadPtr
GetCurrentProcessId
OpenProcess
TerminateProcess
GetCurrentProcess
DeleteFileA
OpenThread
Thread32First
CreateToolhelp32Snapshot
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
FindFirstFileA
HeapAlloc
GetProcessHeap
Sleep
GetCommandLineA
LoadLibraryA
FindClose
FindNextFileA
GetModuleFileNameA

user32

GetWindowRect
GetWindow
GetClassNameW
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
GetDC

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ac3d2d726818ec7749c821e9ab922181

Headers

File Characteristics

Imports

msvcrt

gdi32

kernel32

user32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 40KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 8KB