ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6

Sharing

Copy URL

Twitter E-mail

General

Target

ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6
Size

380KB
MD5

97846d3815dd4dbce109fbb4bc956d1b
SHA1

8cf15812b272a2a026970e723bf58702de5e6c66
SHA256

ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6
SHA512

75f6f935f8b1499e8e3935fa0e3c92303a43bfc5411e8f1c1fe2bb11a76e27f8955420d9ec016e97e011d091e856d7893482bac6c528023ce96cd9b59bb2e17b
SSDEEP

6144:zjzh/uDaV/GN5RvQXJHH08jl1xXzqjrL0lxdL6bIsYqo0h4AXJwoT0JdT7OBtoRC:PdmDEGNvQ5HH0UL1qjklxdL6bAFL0JhD

Score

N/A

Malware Config

Signatures

Files

ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6
.dll windows x86

3c4ec7d012fbd116f20a3c667868bea3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyExA
RegQueryValueExA
RemoveTraceCallback
RegCloseKey

gdi32

CloseFigure
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectA
CreateFontIndirectW
DeleteDC
DeleteObject
ExtTextOutA
ExtTextOutW
GetFontLanguageInfo
GetGlyphOutlineA
GetObjectA
GetTextMetricsA
GetTextMetricsW
SelectObject
SetBkColor
SetBkMode
SetMapMode
SetTextAlign

msvcrt

_isnan
_CIacos
tolower
qsort
memcpy
malloc
iswspace
iswpunct
iswprint
iswalpha
free
floor
_vsnprintf
_unlock
_stricmp
_j0
memmove
_initterm
_finite
_controlfp
_atoi64
_amsg_exit
__p__winver
__dllonexit
_XcptFilter
_Strftime
_CxxThrowException
_CIsqrt
_CIsin
_CIcos
_CIatan
_CIasin

ole32

CreateStreamOnHGlobal

kernel32

WriteTapemark
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualAlloc
UnhandledExceptionFilter
TryEnterCriticalSection
TerminateProcess
SizeofResource
SetThreadContext
RtlUnwind
ReleaseMutex
ReadFile
QueryPerformanceCounter
OutputDebugStringA
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedExchange
InterlockedCompareExchange
GetVersion
GetTickCount
GetSystemTimeAsFileTime
GetProcessPriorityBoost
GetProcessAffinityMask
GetModuleHandleA
GetModuleFileNameA
GetMailslotInfo
GetLastError
GetFullPathNameW
CloseHandle
CreateFileA
CreateMutexA
CreateThread
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FreeLibrary
GetCommProperties
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId

Exports

Exports

Bufferiv
ConcatenateMeshes
EnumerateGuids
GetBufferf
GetFirstRow
MatrixAffineTransformation
SaveFileMemory
Vec2Hermite

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c4ec7d012fbd116f20a3c667868bea3

Headers

File Characteristics

Imports

advapi32

gdi32

msvcrt

ole32

kernel32

Exports

Exports

Sections

.text Size: 71KB - Virtual size: 70KB

.rdata Size: 187KB - Virtual size: 186KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 47KB - Virtual size: 46KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 71KB - Virtual size: 70KB

.rdata
Size: 187KB - Virtual size: 186KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 47KB - Virtual size: 46KB

.reloc
Size: 4KB - Virtual size: 3KB