a918d741eb98a4fe88b26c157f793d09cf5351b3357010d973297c2ddf9cc68d

Sharing

Copy URL

Twitter E-mail

General

Target

a918d741eb98a4fe88b26c157f793d09cf5351b3357010d973297c2ddf9cc68d
Size

588KB
MD5

b74360b35959eadf64b11171f28dd0a0
SHA1

9a351310f74acd7d96340ed674455f1d84cd403e
SHA256

a918d741eb98a4fe88b26c157f793d09cf5351b3357010d973297c2ddf9cc68d
SHA512

94d945fce3e65f5d77c8d911546f0b1ae4e002e5c7898fc329ba078d2d6ac5ea86a9c533e022a84338a205f735317374f755e472255cb5cca72a053755cac585
SSDEEP

12288:8lqs9lwNapCTfUlFosfLBaamYLjEeYSBVA8Yi4ZiIfOp:jsk3YrTfLBaaTjhY8vwZXf

Score

N/A

Malware Config

Signatures

Files

a918d741eb98a4fe88b26c157f793d09cf5351b3357010d973297c2ddf9cc68d
.dll windows x86

73d5719ffc56146787bbc948a2250694

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreate

msvcrt

sqrt
_stricmp
ftell
_CIpow
sprintf
malloc
strcmp
_iob
fseek
strncmp
fprintf
memcpy
atoi
free
qsort
fread
fgets
atol
_assert
strtok
_ftol
fflush
strcpy
strstr
memset
sscanf
fscanf
rand
_filbuf
bsearch
memcmp
calloc
fwrite
abort
fclose
fopen
floor
getenv
printf
memmove
realloc
atof
ungetc
exit

kernel32

GlobalFree
EnterCriticalSection
GetLastError
GetVersionExA
GetStartupInfoA
DeleteCriticalSection
LoadLibraryA
SetThreadPriority
GetModuleHandleA
VirtualAlloc
GetDateFormatA
GetModuleFileNameA
GetCurrentThread
TlsSetValue
TlsAlloc
GetTempPathA
WriteFile
CreateFileA
InitializeCriticalSection
SetLastError
FreeLibrary
TlsFree
GlobalSize
GetProcAddress
VirtualFree
Sleep
TlsGetValue
GetCurrentThreadId
LeaveCriticalSection
GlobalAlloc
OutputDebugStringA
GetTickCount

gdi32

GetPaletteEntries
CreateSolidBrush
DeleteObject
CreateCompatibleBitmap
GetOutlineTextMetricsA
ExtEscape
CreateCompatibleDC
GetRasterizerCaps
GetObjectA
GetGlyphOutlineA
CreateFontIndirectA
DeleteDC
GetObjectType
BitBlt
CreateDIBSection
SetDIBColorTable
GetPixelFormat
SelectObject
GetDeviceCaps
DescribePixelFormat
GetCurrentObject

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

wsprintfA
GetWindowThreadProcessId
MessageBoxA
ClientToScreen
SetWindowsHookExA
GetWindowRect
GetDC
ReleaseDC
FillRect
WindowFromDC
DestroyWindow
GetClientRect
GetParent
GetDesktopWindow
UnhookWindowsHookEx

Exports

Exports

CollFunction3
Free
Int_FromSize_t
ReadLastObjectFromFile
State_ThreadHead
SystemError
filter_heuristics
get_rgb_to_gray_status
set_user_limits

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73d5719ffc56146787bbc948a2250694

Headers

File Characteristics

Imports

ddraw

msvcrt

kernel32

gdi32

advapi32

user32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 72KB - Virtual size: 69KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 208KB - Virtual size: 206KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 72KB - Virtual size: 69KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 208KB - Virtual size: 206KB

.reloc
Size: 8KB - Virtual size: 7KB