82f4a5b108d891ed065a6b0529c369209ab8c883595a09e3ed55204b83ccb27e

Sharing

Copy URL

Twitter E-mail

General

Target

82f4a5b108d891ed065a6b0529c369209ab8c883595a09e3ed55204b83ccb27e
Size

268KB
MD5

912c04d79c2ee4cad9404fd3421d07c0
SHA1

34ff6db3817b14f5a8bc3a6746569389a81352c3
SHA256

82f4a5b108d891ed065a6b0529c369209ab8c883595a09e3ed55204b83ccb27e
SHA512

24f628e8688bda65bb8a812cc11f33c20112f3acf39269235c8cc663209795bd8ad2e291469ab4ad93b4fa76e0e158ba6616f648a60817dec6be49db2d5b62a1
SSDEEP

6144:+Fv4rG6uDgsO1763bnrObaVbR9PjyesYSBokSJAyU9OgrBD:+J4rG9DPi6zrOc3jye7SBokS6yONdD

Score

N/A

Malware Config

Signatures

Files

82f4a5b108d891ed065a6b0529c369209ab8c883595a09e3ed55204b83ccb27e
.exe windows x86

d35675c699e876414389637827cf0554

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
sprintf
fabs
ceil
malloc
floor
free
fclose
strncpy
strlen
strcpy
strcat
_stricmp
memcpy
_CIasin
_CIpow

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapFree
HeapAlloc
InitializeCriticalSection
TlsAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
CloseHandle
CreateSemaphoreA
ReleaseSemaphore
GetThreadPriority
SetThreadPriority
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
SetFilePointer
SetEndOfFile
WriteFile
HeapReAlloc
DeleteCriticalSection
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

GetWindow
SetActiveWindow
RemovePropA
SendMessageA
DestroyWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
GetCursorPos
ScreenToClient
GetClientRect
SetCursorPos
LoadImageA
SetCursor
GetWindowLongA
GetParent
MapWindowPoints
MoveWindow
SystemParametersInfoA
GetWindowRect
GetSystemMetrics
GetKeyState
SetCapture
PostMessageA
ReleaseCapture
DestroyIcon
FillRect
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
SetWindowPos
EnableWindow
EnumWindows

gdi32

DeleteObject
GetStockObject
GetObjectType
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel

comdlg32

GetSaveFileNameA
GetOpenFileNameA

comctl32

InitCommonControlsEx

ole32

RevokeDragDrop
CoInitialize

Sections

.code
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d35675c699e876414389637827cf0554

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

comctl32

ole32

Sections

.code Size: 21KB - Virtual size: 20KB

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 512B - Virtual size: 313B

.data Size: 3KB - Virtual size: 4KB

.code
Size: 21KB - Virtual size: 20KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 512B - Virtual size: 313B

.data
Size: 3KB - Virtual size: 4KB