c33fdcc9f8267479d66aab6b0994f5ffb132432b0b1946377ceb113265794eaf

Sharing

Copy URL Twitter E-mail

General

Target

c33fdcc9f8267479d66aab6b0994f5ffb132432b0b1946377ceb113265794eaf
Size

405KB
MD5

5c86d256d0a6da896beb19764449e93c
SHA1

322d6dd78fe2f3c2e64664a5723b7188f57acdbc
SHA256

c33fdcc9f8267479d66aab6b0994f5ffb132432b0b1946377ceb113265794eaf
SHA512

13cc7afd24df0828a756a344040ffb7f115f14bd27b659694a32c82a2d3ca50184208690a76543ddf41551e13aebb49ec4832139582c97d2f90ad7f83b876d35
SSDEEP

12288:mEsPSF3uy9qnQ65rXEffpG1PLlah9E0E:MSgy0Q65OG1PG9NE

Score

N/A

Malware Config

Signatures

Files

c33fdcc9f8267479d66aab6b0994f5ffb132432b0b1946377ceb113265794eaf
.dll windows x86

1fa4c25ad24eb5b40aa7101a5f7c60dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

tolower
qsort
memmove
memcpy
malloc
iswspace
iswpunct
iswdigit
iswalpha
free
floor
ferror
_vsnwprintf
_vsnprintf
_unlock
_stricmp
_pwctype
_purecall
_onexit
_lock
_isnan
_initterm
_finite
_controlfp
_amsg_exit
__wgetmainargs
__threadid
__dllonexit
__CxxFrameHandler
_XcptFilter
_CIsqrt
_CIsin
_CIcos
_CIatan2
_CIatan
_CIasin
_CIacos

advapi32

RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

kernel32

UnhandledExceptionFilter
TerminateProcess
SetUnhandledExceptionFilter
RtlUnwind
ReleaseMutex
QueryPerformanceFrequency
QueryPerformanceCounter
WaitForMultipleObjects
WaitForSingleObject
WriteFile
VirtualAlloc
CreateFileA
CreateIoCompletionPort
CreateMutexA
CreateThread
DebugBreak
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FindResourceW
FreeConsole
FreeLibrary
GetCommandLineA
GetConsoleScreenBufferInfo
GetCurrentConsoleFont
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
OutputDebugStringA
GetExitCodeThread
GetFileSize
GetFileSizeEx
GetFullPathNameW
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultLCID
GetVersion
GlobalMemoryStatusEx
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
GetCurrentThreadId

gdi32

SetBkMode
SelectObject
Pie
MoveToEx
GetTextMetricsA
GetPixelFormat
GetObjectW
GetObjectA
GetDIBits
GetCharacterPlacementW
SetMapMode
ExtTextOutW
ExtTextOutA
DeleteObject
DeleteDC
CreateFontIndirectW
CreateFontIndirectA
CreateDIBSection
CreateCompatibleDC
CloseMetaFile
CloseFigure
SetTextAlign
SetTextColor
TranslateCharsetInfo
GetCharacterPlacementA

ole32

CreateStreamOnHGlobal

Exports

Exports

Bufferiv
ConcatenateMeshes
EnumerateGuids
GetBufferf
GetFirstRow
MatrixAffineTransformation
SaveFileMemory
Vec2Hermite

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1fa4c25ad24eb5b40aa7101a5f7c60dc

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

gdi32

ole32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 189KB - Virtual size: 188KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 64KB - Virtual size: 64KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 189KB - Virtual size: 188KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 64KB - Virtual size: 64KB

.reloc
Size: 4KB - Virtual size: 4KB