f9d367c74c8905265218ca4ba024053a844324c849ecc06668c41821c492a17d

Sharing

Copy URL Twitter E-mail

General

Target

f9d367c74c8905265218ca4ba024053a844324c849ecc06668c41821c492a17d
Size

395KB
MD5

743e2c3ec5460db9196aac04aef6ced2
SHA1

4ff9fcc90361c430c77a2fa5292d32ff5ab38d75
SHA256

f9d367c74c8905265218ca4ba024053a844324c849ecc06668c41821c492a17d
SHA512

cdae6917b9d1eb18b589a98368bc51cdf8174ad5dcf1be1a8177a2fd9a8d08a85a36e23a5670efd83fb37d4fb663ee9e802c683a7f92aaed48928e2e8b175aca
SSDEEP

6144:r3gm5mCwPm8WJHxbtGbZ4Liu8+BjoaVUQso0SspP3x:XCmPbmFPdovs1

Score

N/A

Malware Config

Signatures

Files

f9d367c74c8905265218ca4ba024053a844324c849ecc06668c41821c492a17d
.dll windows x86

dca032ed76c055d978b5dde7b16b36bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetVersion
GlobalFix
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadHugeWritePtr
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
GetSystemTimeAsFileTime
ReadFile
ReleaseMutex
RtlUnwind
SetFileApisToOEM
SetSystemTime
SetUnhandledExceptionFilter
SetWaitableTimer
SetupComm
SizeofResource
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
GetProcessPriorityBoost
GetProcessAffinityMask
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
CloseHandle
GetLastError
GetFullPathNameW
GetFileType
GetFileSizeEx
GetFileSize
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
FreeLibrary
FindResourceW
FindResourceA
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
DebugBreak
CreateThread
CreateMutexA
CreateFileA
CreateConsoleScreenBuffer
QueryPerformanceFrequency

gdi32

TranslateCharsetInfo
SetTextColor
SetBkMode
SetBkColor
SelectObject
MoveToEx
GetWinMetaFileBits
GetTextMetricsW
GetTextMetricsA
GetObjectW
GetObjectA
GetGlyphOutlineA
GetFontLanguageInfo
GetColorAdjustment
GetCharacterPlacementA
ExtTextOutW
ExtTextOutA
DeleteDC
CreateRectRgnIndirect
CreateFontIndirectA
CreateDIBSection
CreateCompatibleDC
DeleteObject

advapi32

SystemFunction001
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

ole32

CreateStreamOnHGlobal

msvcrt

_purecall
tolower
_CIacos
_CIatan
_CIatan2
_CIcos
_CIsin
_CIsqrt
_CxxThrowException
_XcptFilter
__CxxFrameHandler
__RTDynamicCast
__dllonexit
_amsg_exit
_controlfp
_finite
_fullpath
_initterm
_isnan
_lock
_mbscspn
_mbsrchr
_onexit
_stricmp
_unlock
_vsnprintf
_vsnwprintf
_wcmdln
_wcreat
_wexeclpe
calloc
floor
free
iswalpha
iswdigit
iswpunct
iswspace
malloc
mbtowc
memcpy
memmove
memset
qsort

Exports

Exports

Float16To32Array
QuerySingleInstanceW
SetPCDResolution
Vec3BaryCentric

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dca032ed76c055d978b5dde7b16b36bf

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

ole32

msvcrt

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 66KB

.rdata Size: 201KB - Virtual size: 201KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 51KB - Virtual size: 51KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 67KB - Virtual size: 66KB

.rdata
Size: 201KB - Virtual size: 201KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 51KB - Virtual size: 51KB

.reloc
Size: 3KB - Virtual size: 3KB