83f451fd15f877da22b2b80d41e11a680260903c847450ad4572dc22e626d233

Sharing

Copy URL

Twitter E-mail

General

Target

83f451fd15f877da22b2b80d41e11a680260903c847450ad4572dc22e626d233
Size

85KB
MD5

cae23cc01dd768ace7d415f6a8e2809b
SHA1

144035cffd0e1c97568daabe7dbf4840a84d4119
SHA256

83f451fd15f877da22b2b80d41e11a680260903c847450ad4572dc22e626d233
SHA512

3410e03fbc403b5b643731e124b71c6c4aa924da9450cc3e369c1d9ec070ea160590df087cb9cfbe92c158bb1688017f898153ab4907520f60edb44f34b9d7bc
SSDEEP

1536:MvdE1JyKirWKhxhPzfutjpVMRjgd0jho70xFyOuep99vRFzHs:QGzyBPJzGlIXFoQsop9Vs

Score

N/A

Malware Config

Signatures

Files

83f451fd15f877da22b2b80d41e11a680260903c847450ad4572dc22e626d233
.dll windows x86

c8613ff9c21ecc96fa588a684d753908

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcsrchr
wcsncmp
memmove
iswctype
wcscpy
malloc
_wcsicmp
wcschr
calloc
strncpy
free
_stricmp
_ftol
atoi
realloc
wcscat
wcslen
sprintf
wcsncpy
_except_handler3

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
lstrlenW
MultiByteToWideChar
_lwrite
WriteFile
GetLastError
CreateFileW
GetTempPathW
WideCharToMultiByte
WaitForMultipleObjects
ReleaseMutex
ResetEvent
ReleaseSemaphore
WaitForSingleObject
SetEvent
CloseHandle
ReadFile
lstrcatW
GetWindowsDirectoryW
SetFilePointer
GetFileSize
GetSystemDefaultLangID
CreateSemaphoreW
CreateEventW
CreateMutexW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileInformationByHandle
QueryPerformanceCounter
GetTickCount

gdi32

GetGlyphOutlineW
RemoveFontResourceExW
AddFontResourceExW
GetFontResourceInfoW
EnumFontFamiliesExW
GetFontData
NamedEscape

user32

ReleaseDC
wsprintfW
PostMessageW
GetDC

advapi32

RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey

Exports

Exports

ATMAddFont
ATMAddFontA
ATMAddFontEx
ATMAddFontExA
ATMAddFontExW
ATMAddFontW
ATMBBoxBaseXYShowText
ATMBBoxBaseXYShowTextA
ATMBBoxBaseXYShowTextW
ATMBeginFontChange
ATMClient
ATMEndFontChange
ATMEnumFonts
ATMEnumFontsA
ATMEnumFontsW
ATMEnumMMFonts
ATMEnumMMFontsA
ATMEnumMMFontsW
ATMFinish
ATMFontAvailable
ATMFontAvailableA
ATMFontAvailableW
ATMFontSelected
ATMFontStatus
ATMFontStatusA
ATMFontStatusW
ATMForceFontChange
ATMGetBuildStr
ATMGetBuildStrA
ATMGetBuildStrW
ATMGetFontBBox
ATMGetFontInfo
ATMGetFontInfoA
ATMGetFontInfoW
ATMGetFontPaths
ATMGetFontPathsA
ATMGetFontPathsW
ATMGetGlyphList
ATMGetGlyphListA
ATMGetGlyphListW
ATMGetMenuName
ATMGetMenuNameA
ATMGetMenuNameW
ATMGetNtmFields
ATMGetNtmFieldsA
ATMGetNtmFieldsW
ATMGetOutline
ATMGetOutlineA
ATMGetOutlineW
ATMGetPostScriptName
ATMGetPostScriptNameA
ATMGetPostScriptNameW
ATMGetVersion
ATMGetVersionEx
ATMGetVersionExA
ATMGetVersionExW
ATMInstallSubstFontA
ATMInstallSubstFontW
ATMMakePFM
ATMMakePFMA
ATMMakePFMW
ATMMakePSS
ATMMakePSSA
ATMMakePSSW
ATMProperlyLoaded
ATMRemoveFont
ATMRemoveFontA
ATMRemoveFontW
ATMRemoveSubstFontA
ATMRemoveSubstFontW
ATMSelectEncoding
ATMSelectObject
ATMSetFlags
ATMXYShowText
ATMXYShowTextA
ATMXYShowTextW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8613ff9c21ecc96fa588a684d753908

Headers

File Characteristics

Imports

msvcrt

kernel32

gdi32

user32

advapi32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 24KB

.data Size: 56KB - Virtual size: 56KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 25KB - Virtual size: 24KB

.data
Size: 56KB - Virtual size: 56KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB