449d1c42bee2cae0237799da7f65a3df1439576c055ad4a51a77c40b57643c50

Sharing

Copy URL

Twitter E-mail

General

Target

449d1c42bee2cae0237799da7f65a3df1439576c055ad4a51a77c40b57643c50
Size

425KB
MD5

a010cf3d2cb05ad825ff43a0f4273e96
SHA1

b9a866954385b2cc7869228fd60be40c654bb73b
SHA256

449d1c42bee2cae0237799da7f65a3df1439576c055ad4a51a77c40b57643c50
SHA512

790e6b6b8e9a4339926b3ca160db31baf45cd5a9cc976f69dce54830dfda98085863ae196f1db1449c2a47787064666226bfa02cc96ffbb019b5bf9749082cd9
SSDEEP

12288:nrV+5BPAsDDucj7OfAB1plF+1/SoZ5gOIT0B:c5BPAsHucj7UejOZqd

Score

N/A

Malware Config

Signatures

Files

449d1c42bee2cae0237799da7f65a3df1439576c055ad4a51a77c40b57643c50
.dll windows x86

1fa4c25ad24eb5b40aa7101a5f7c60dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

tolower
qsort
memmove
memcpy
malloc
iswspace
iswpunct
iswdigit
iswalpha
free
floor
ferror
_vsnwprintf
_vsnprintf
_unlock
_stricmp
_pwctype
_purecall
_onexit
_lock
_isnan
_initterm
_finite
_controlfp
_amsg_exit
__wgetmainargs
__threadid
__dllonexit
__CxxFrameHandler
_XcptFilter
_CIsqrt
_CIsin
_CIcos
_CIatan2
_CIatan
_CIasin
_CIacos

advapi32

RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

kernel32

UnhandledExceptionFilter
TerminateProcess
SetUnhandledExceptionFilter
RtlUnwind
ReleaseMutex
QueryPerformanceFrequency
QueryPerformanceCounter
WaitForMultipleObjects
WaitForSingleObject
WriteFile
VirtualAlloc
CreateFileA
CreateIoCompletionPort
CreateMutexA
CreateThread
DebugBreak
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FindResourceW
FreeConsole
FreeLibrary
GetCommandLineA
GetConsoleScreenBufferInfo
GetCurrentConsoleFont
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
OutputDebugStringA
GetExitCodeThread
GetFileSize
GetFileSizeEx
GetFullPathNameW
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultLCID
GetVersion
GlobalMemoryStatusEx
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
GetCurrentThreadId

gdi32

SetBkMode
SelectObject
Pie
MoveToEx
GetTextMetricsA
GetPixelFormat
GetObjectW
GetObjectA
GetDIBits
GetCharacterPlacementW
SetMapMode
ExtTextOutW
ExtTextOutA
DeleteObject
DeleteDC
CreateFontIndirectW
CreateFontIndirectA
CreateDIBSection
CreateCompatibleDC
CloseMetaFile
CloseFigure
SetTextAlign
SetTextColor
TranslateCharsetInfo
GetCharacterPlacementA

ole32

CreateStreamOnHGlobal

Exports

Exports

Bufferiv
ConcatenateMeshes
EnumerateGuids
GetBufferf
GetFirstRow
MatrixAffineTransformation
SaveFileMemory
Vec2Hermite

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1fa4c25ad24eb5b40aa7101a5f7c60dc

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

gdi32

ole32

Exports

Exports

Sections

.text Size: 85KB - Virtual size: 84KB

.rdata Size: 200KB - Virtual size: 200KB

.data Size: 69KB - Virtual size: 71KB

.rsrc Size: 63KB - Virtual size: 63KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 85KB - Virtual size: 84KB

.rdata
Size: 200KB - Virtual size: 200KB

.data
Size: 69KB - Virtual size: 71KB

.rsrc
Size: 63KB - Virtual size: 63KB

.reloc
Size: 5KB - Virtual size: 5KB