d12d88deee41170486a6104c3679a1536d9274b04c2fe4c227416e212b5eb497

Sharing

Copy URL Twitter E-mail

General

Target

d12d88deee41170486a6104c3679a1536d9274b04c2fe4c227416e212b5eb497
Size

419KB
MD5

82de1739f204eabbf961a1818be3ef0f
SHA1

12dd9356527b4b4f3cdf0cf624779bfef1acbddb
SHA256

d12d88deee41170486a6104c3679a1536d9274b04c2fe4c227416e212b5eb497
SHA512

b5246dbd6c96455eb916785740307da78c70bf2d6ac8aed346ea488a77db0c1dc8dd1ee9de36106fc2f74d7f346de968e9da4372f7174362cd98bea9bf5f3a27
SSDEEP

6144:XvgD8ySSaGbBums5GeoQMhIKkj81VM547WgwZtL0w3cyQSZFDqhHYnwz:XvdyoKkGFQMyKkj8jM5QWtZtOjSZ5Bw

Score

N/A

Malware Config

Signatures

Files

d12d88deee41170486a6104c3679a1536d9274b04c2fe4c227416e212b5eb497
.dll windows x86

b0ba70c316c8b27b19d0489a4c24566d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
RtlUnwind
RtlZeroMemory
SetFilePointerEx
SetThreadContext
LoadResource
SizeofResource
TerminateProcess
TryEnterCriticalSection
VirtualAlloc
WaitForMultipleObjects
WaitForSingleObject
WriteTapemark
_hread
LoadLibraryA
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedExchange
InterlockedCompareExchange
CloseHandle
GetVersion
GetTickCount
GetSystemTimeAsFileTime
GetProcessPriorityBoost
GetModuleHandleA
GetLastError
GetDevicePowerState
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
FreeLibrary
FlushFileBuffers
FindResourceA
ExitProcess
EnterCriticalSection
CreateMutexA
SetupComm

dinput

DirectInputCreateA

ole32

CreateStreamOnHGlobal

advapi32

CloseTrace
RegCloseKey
RegEnumKeyExA
LsaClose

gdi32

ExtTextOutA
DeleteObject
DeleteDC
CreateFontIndirectW
GdiGetBatchLimit
CreateDIBSection
CreateCompatibleDC
CloseFigure
GetObjectA
GetTextMetricsA
GetTextMetricsW
SelectObject
SetTextAlign
SetBkMode
CreateFontIndirectA
SetMapMode

msvcrt

_ismbclower
wcsncpy
_CIcos
_CIsqrt
_CxxThrowException
_XcptFilter
__CxxLongjmpUnwind
__RTDynamicCast
__dllonexit
__p__winver
_amsg_exit
_atoi64
_finite
_gcvt
_initterm
_j0
_mbsicoll
_mbsncat
_stricmp
_unlock
_vsnprintf
floor
free
iswspace
malloc
sqrt
tolower

Exports

Exports

Number_Negative
SimpleFileExFlags
StandardError
String_FromString
set_gAMA_fixed

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0ba70c316c8b27b19d0489a4c24566d

Headers

File Characteristics

Imports

kernel32

dinput

ole32

advapi32

gdi32

msvcrt

Exports

Exports

Sections

.text Size: 71KB - Virtual size: 70KB

.rdata Size: 243KB - Virtual size: 243KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 29KB - Virtual size: 29KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 71KB - Virtual size: 70KB

.rdata
Size: 243KB - Virtual size: 243KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 4KB - Virtual size: 3KB