96e53d639e207fa94ef2cdae090541cc06112599573ad5f76518a7a69d768235

General

Target

96e53d639e207fa94ef2cdae090541cc06112599573ad5f76518a7a69d768235
Size

728KB
MD5

822e855b87e9c58264193ab52e13d460
SHA1

cec40a3011617b6838e5221877496c57fa3d82db
SHA256

96e53d639e207fa94ef2cdae090541cc06112599573ad5f76518a7a69d768235
SHA512

1f61860a525ef00747412ae098a88e9721f2530543b8abec40ed8368b8b81d4fa3f62972dc9b188d2eb12358b6954c25cb18418c37d9c7803de09c04f81f97ab
SSDEEP

6144:d/+Z81/Z3q5mndPs3QpxhWXKF3/zEWeCokvRTR8OI++OfUze8t76ySNCRmUeR9Kq:F+KR65MYQPh+KFLeCxt/p+4M6XV5lJz

Score

N/A

Malware Config

Signatures

Files

96e53d639e207fa94ef2cdae090541cc06112599573ad5f76518a7a69d768235
.dll windows x86

5198f61637dd5cdf0ae1f6525da81fd0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
fprintf
_CIpow
memmove
strcpy
_ftol
sprintf
fclose
_stricmp
strtok
strncmp
fopen
_iob
free
strstr
sscanf
fseek
ftell
getenv
_assert
strcmp
fwrite
rand
realloc
abort
memcpy
exit
fgets
atol
malloc
fread

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

GlobalAlloc
SetLastError
IsBadReadPtr
FreeLibrary
VirtualAlloc
GetCurrentThreadId
GetTickCount
GetStartupInfoA
GlobalFree
VirtualFree
EnterCriticalSection
GetLastError
Sleep
InitializeCriticalSection
GetModuleFileNameA
GlobalSize
TlsGetValue
TlsAlloc
LeaveCriticalSection
DeleteCriticalSection
GetDateFormatA
SetThreadPriority
GetProcAddress
GetModuleHandleA
CreateFileA
TlsSetValue
QueryPerformanceCounter
TlsFree
LoadLibraryA

user32

GetParent
MessageBoxA
wsprintfA
ReleaseDC
GetWindowRect
GetDC

Exports

Exports

EvalCodeEx
Long_FromSsize_t
_Size
_mystrnicmp
get_gAMA_fixed
set_tRNS_to_alpha

Sections

.text
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5198f61637dd5cdf0ae1f6525da81fd0

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 173KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 256KB - Virtual size: 256KB

.rsrc Size: 208KB - Virtual size: 207KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 176KB - Virtual size: 173KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 256KB - Virtual size: 256KB

.rsrc
Size: 208KB - Virtual size: 207KB

.reloc
Size: 8KB - Virtual size: 6KB