3e8e989cf08eb51062fedd019c97de0493ed5f0c799af7cedeec726c9481e19f

Sharing

Copy URL Twitter E-mail

General

Target

3e8e989cf08eb51062fedd019c97de0493ed5f0c799af7cedeec726c9481e19f
Size

407KB
MD5

d276b1df18c76cae710b692b6585d993
SHA1

1ad0498b8f7141bc845b10b2ced2c04e9addf9d8
SHA256

3e8e989cf08eb51062fedd019c97de0493ed5f0c799af7cedeec726c9481e19f
SHA512

a3dc4e299502fc9fd6562e2d98775499f8551487456e4e825b1a6335d795a226347e05eb27ef405772b68df892477a58a20f04deee13a2e208408d4ab90c8270
SSDEEP

6144:VhvmtWqCxncTQKMW87/BWcMQ1NLKptEnKK9NZ3XXjyA1c5XRiCkM3oO++2pw:V9GDCRJTp7J3MuNep+nKKjZWdxkfp

Score

N/A

Malware Config

Signatures

Files

3e8e989cf08eb51062fedd019c97de0493ed5f0c799af7cedeec726c9481e19f
.dll windows x86

7f21ad44f845fae25d0c0deed68b3f2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

tolower
strcat
qsort
putc
memset
memmove
memcpy
malloc
iswspace
iswpunct
iswdigit
iswalpha
free
asin
_wcsset
_vsnwprintf
_vsnprintf
_unlock
_stricmp
_onexit
_lock
_isnan
_initterm
_i64toa
_finite
_controlfp
_beep
_amsg_exit
__dllonexit
__CxxFrameHandler
_XcptFilter
_CxxThrowException
_CIsqrt
_CIsin
_CIcos
_CIatan2
_CIatan
_CIasin
_CIacos

kernel32

_llseek
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
WaitCommEvent
VirtualAlloc
UnhandledExceptionFilter
TransactNamedPipe
TerminateProcess
SizeofResource
CloseHandle
CreateFileA
CreateMutexA
CreateThread
DebugBreak
DeleteAtom
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
ExitProcess
FindResourceA
FindResourceW
FlushViewOfFile
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetFileSizeEx
GetFullPathNameW
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTickCount
GetVersion
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MapViewOfFileEx
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RtlUnwind
SetFilePointerEx
GetProcessPriorityBoost

advapi32

LsaClearAuditLog
RegEnumKeyExA
RegQueryValueExA
RegCloseKey

gdi32

SetBkColor
SelectObject
SelectClipPath
MoveToEx
GetTextMetricsW
GetTextMetricsA
GetObjectW
GetObjectA
GetGlyphOutlineA
SetBkMode
GetCharacterPlacementW
ExtTextOutW
ExtTextOutA
DeleteObject
DeleteDC
CreateFontIndirectW
CreateFontIndirectA
CreateDIBSection
CreateCompatibleDC
SetMapMode
SetTextAlign
TranslateCharsetInfo
GetFontLanguageInfo

ole32

CreateStreamOnHGlobal

Exports

Exports

Buffer3f
ComputeBoundingBox
MatrixOrthoRH
SaveFileOffset
SetStep
SourceStopv
TessellateTriPatch
Vec3UnprojectArray
mpegInGetNextFrameTS

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f21ad44f845fae25d0c0deed68b3f2d

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

gdi32

ole32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 79KB

.rdata Size: 185KB - Virtual size: 185KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 64KB - Virtual size: 64KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 80KB - Virtual size: 79KB

.rdata
Size: 185KB - Virtual size: 185KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 64KB - Virtual size: 64KB

.reloc
Size: 5KB - Virtual size: 5KB