cfacdcd7ecd63cd2f37bfeed120559bcd8785627d00c9897eeccf2adc7d2d4b2

Sharing

Copy URL Twitter E-mail

General

Target

cfacdcd7ecd63cd2f37bfeed120559bcd8785627d00c9897eeccf2adc7d2d4b2
Size

435KB
MD5

6e5800cc15e799c5c2c41f2b77dc8478
SHA1

642d4eaa31b03efa2e00abf4d38dfffa602c6242
SHA256

cfacdcd7ecd63cd2f37bfeed120559bcd8785627d00c9897eeccf2adc7d2d4b2
SHA512

de3201cdac4b38631671c803fb8557758c8db4881b2b6762a91765fc91107dab2983cb51b296e17ee52f56916b5ebb3357408a8f1fc14867c0a2123ff6d51d8c
SSDEEP

12288:XD/UHj5rR8iFf6Ohik5p3p+3BO4aVh1PW5mh/t2qVS6ScX:Cj5jf6oik5pk3OjhW5mhbE6ScX

Score

N/A

Malware Config

Signatures

Files

cfacdcd7ecd63cd2f37bfeed120559bcd8785627d00c9897eeccf2adc7d2d4b2
.dll windows x86

7904d1abace88d91db80e7d470d59881

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dinput

DirectInputCreateA

kernel32

LoadLibraryA
MapUserPhysicalPages
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
ReleaseMutex
RtlUnwind
SetThreadContext
SystemTimeToTzSpecificLocalTime
TerminateProcess
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualAlloc
WideCharToMultiByte
WriteTapemark
LeaveCriticalSection
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedExchange
InterlockedCompareExchange
CreateMutexA
CreateThread
DisableThreadLibraryCalls
EnterCriticalSection
GetVersion
ExitProcess
FindResourceA
FreeLibrary
GetCommProperties
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
GetLastError
GetMailslotInfo
GetModuleHandleA
GetProcessAffinityMask
CreateFileA
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetTickCount

advapi32

RegEnumKeyExA
RegQueryValueExA
SystemFunction041
RegCloseKey

msvcrt

_unlock
_vsnprintf
floor
free
iswalpha
iswprint
iswpunct
iswspace
malloc
memcpy
memmove
puts
qsort
tolower
_stricmp
_outp
_j0
_initterm
_finite
_execve
_controlfp
_atoi64
_amsg_exit
__threadhandle
__p__winver
__dllonexit
_XcptFilter
_Strftime
_CxxThrowException
_CIsqrt
_CIcos
_CIatan
_CIasin
_CIacos
_isnan
_CIsin

gdi32

SelectObject
GetViewportOrgEx
GetTextMetricsW
GetTextMetricsA
GetObjectA
GetMetaFileBitsEx
GetGlyphOutlineA
SetBkColor
ExtTextOutA
DeleteObject
DeleteDC
CreateFontIndirectW
CreateFontIndirectA
CreateDIBSection
CreateCompatibleDC
CloseFigure
SetBkMode
SetMapMode
SetMapperFlags
SetTextAlign
GetFontLanguageInfo

ole32

CreateStreamOnHGlobal

Exports

Exports

AnyFile
GetItemString
Items
Node_New
RealAsDouble
UserWarning
_New
convert_to_rfc1123
read_update_info

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7904d1abace88d91db80e7d470d59881

Headers

File Characteristics

Imports

dinput

kernel32

advapi32

msvcrt

gdi32

ole32

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 68KB

.rdata Size: 255KB - Virtual size: 254KB

.data Size: 70KB - Virtual size: 71KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 69KB - Virtual size: 68KB

.rdata
Size: 255KB - Virtual size: 254KB

.data
Size: 70KB - Virtual size: 71KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 4KB - Virtual size: 3KB