4a594c2725ea721a85bba38a675e8ab465f69dbfdff8c8a406b0a4b397031d2c

General

Target

4a594c2725ea721a85bba38a675e8ab465f69dbfdff8c8a406b0a4b397031d2c
Size

288KB
MD5

66da89e011382078d6864bef445277a0
SHA1

5b07c5cdeddac7d74018825c150cee25850a45ff
SHA256

4a594c2725ea721a85bba38a675e8ab465f69dbfdff8c8a406b0a4b397031d2c
SHA512

43823924278d0ef52410d4a3136190b20cb699f3f7925b22ebc7dea817012623b9790f299ad33de97def43028380b68f7e85f757e6e83f4190a170c27a87467e
SSDEEP

6144:XU8Pql8l3xTI2F60ZqGqj90vHyUyK3zSv:Eue27qxqHyUy+m

Score

N/A

Malware Config

Signatures

Files

4a594c2725ea721a85bba38a675e8ab465f69dbfdff8c8a406b0a4b397031d2c
.dll windows x86

882ee1fb90487eab4925db7e81d2443c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
ReleaseDC
UnhookWindowsHookEx
GetParent
GetWindowThreadProcessId
PrintWindow
MessageBoxA
GetClientRect
GetDC

msvcrt

fprintf
strcpy
fseek
getenv
_ftol
printf
fwrite
sscanf
_CIpow
fclose
memmove
_assert
atol
realloc
strncmp
exit
malloc
_stricmp
_iob
fread
memcpy
strcmp
bsearch
ftell
free
fopen
atoi
strstr
rand
abort
memset
sprintf
strtok
fgets
calloc
sqrt

kernel32

LeaveCriticalSection
GetStartupInfoA
QueryPerformanceCounter
TlsFree
GlobalFree
VirtualFree
GetCurrentThreadId
FlushConsoleInputBuffer
SetLastError
GetCurrentThread
GetLastError
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
Sleep
LoadLibraryA
GlobalSize
SetThreadPriority
VirtualAlloc
IsBadReadPtr
GetVersionExA
GlobalAlloc
GetTickCount
TlsAlloc
TlsSetValue
CreateFileA
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
GetDateFormatA
FreeLibrary

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

CheckSignals
GetItemString
NewMember
ReplaceErrors
get_image_width
write_init_2

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

882ee1fb90487eab4925db7e81d2443c

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

advapi32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 86KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 40KB - Virtual size: 40KB

.rsrc Size: 80KB - Virtual size: 79KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 88KB - Virtual size: 86KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 80KB - Virtual size: 79KB

.reloc
Size: 8KB - Virtual size: 5KB