2099efc90278bfca94d8b45969750229dd581b293c4d3c6a2f4bf867f81f3023

General

Target

2099efc90278bfca94d8b45969750229dd581b293c4d3c6a2f4bf867f81f3023
Size

732KB
MD5

a069b26e4b962a1ee6af44fdcacf09c0
SHA1

d23654afb1b154c4cf029a33e8a806efa416fbf3
SHA256

2099efc90278bfca94d8b45969750229dd581b293c4d3c6a2f4bf867f81f3023
SHA512

1696fc488d0ae65ee9c92149fced71b8dd302c7bdee3dc95a32601795c30750255747cec09492f50d6b6ab2d68524524796639cfed1e637232e9a234cfa929ba
SSDEEP

12288:A67I7X0+DKPpjjN4MZCOpGRcW17FGxSC:A2I7X0+DQN4BLhGxSC

Score

N/A

Malware Config

Signatures

Files

2099efc90278bfca94d8b45969750229dd581b293c4d3c6a2f4bf867f81f3023
.dll windows x86

03f41520e4af3820fb7bdb96f9a777d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetDateFormatA
SetLastError
LeaveCriticalSection
GlobalSize
InitializeCriticalSection
GetModuleFileNameA
LoadLibraryA
TlsAlloc
GlobalAlloc
FreeLibrary
QueryPerformanceCounter
GetStartupInfoA
IsBadReadPtr
GetTickCount
SetThreadPriority
GetProcAddress
TlsSetValue
DeleteCriticalSection
EnterCriticalSection
GetModuleHandleA
VirtualFree
GetLastError
GetCurrentThreadId
VirtualAlloc
TlsFree
Sleep
CreateFileA
GlobalFree

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

msvcrt

fseek
_ftol
malloc
_iob
ftell
strstr
fwrite
sscanf
memcpy
atol
abort
free
getenv
fclose
memset
exit
fprintf
fread
fopen
_stricmp
_CIpow
strncmp
strcmp
fgets
realloc
_assert
rand
strtok
strcpy
memmove
sprintf

user32

ReleaseDC
GetParent
wsprintfA
GetDC
MessageBoxA
GetWindowRect

Exports

Exports

Int_AsLong
Long_AsSsize_t
Method_Function4
get_x_pixels_per_meter

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03f41520e4af3820fb7bdb96f9a777d0

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

user32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 256KB - Virtual size: 256KB

.rsrc Size: 208KB - Virtual size: 207KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 256KB - Virtual size: 256KB

.rsrc
Size: 208KB - Virtual size: 207KB

.reloc
Size: 8KB - Virtual size: 6KB