a30b8b5f27940a09aa34bebf26cc1f075ae418187816bd92e7e7967b0fa28180

Sharing

Copy URL Twitter E-mail

General

Target

a30b8b5f27940a09aa34bebf26cc1f075ae418187816bd92e7e7967b0fa28180
Size

435KB
MD5

9ab55884948071cd6ed607c7ab771d1e
SHA1

e2d745003c5ede9b09aac5cb21eafc9e8ef0b805
SHA256

a30b8b5f27940a09aa34bebf26cc1f075ae418187816bd92e7e7967b0fa28180
SHA512

4c8f6a3b6ab564a117de347587afe268dab448284cd6801e9a0651608c5ea28a79f7e68d29db4b1a13a96fa06a9bb1519e01dbfac9602d1a5c11aeeb6b6a49cb
SSDEEP

12288:OALdne2RhBuCEboJ8GQuQm/nm5kToCledhSIUQ:xL02RhcDfPuoIGU

Score

N/A

Malware Config

Signatures

Files

a30b8b5f27940a09aa34bebf26cc1f075ae418187816bd92e7e7967b0fa28180
.dll windows x86

7cb51469d22499db4ff9953411172933

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegEnumKeyExA
RegQueryValueExA
DestroyPrivateObjectSecurity

ole32

CreateStreamOnHGlobal

gdi32

CloseFigure
CreateCompatibleDC
CreateFontIndirectW
DeleteDC
DeleteObject
Escape
ExtTextOutA
ExtTextOutW
GetFontLanguageInfo
GetFontResourceInfoW
GetGlyphOutlineA
GetTextMetricsA
GetTextMetricsW
ScaleViewportExtEx
SelectObject
SetBkColor
SetBkMode
SetMapMode
SetTextAlign

msvcrt

_isnan
tolower
tanh
srand
qsort
memmove
memcpy
iswspace
iswpunct
iswprint
iswalpha
free
floor
_unlock
_stricmp
_mbscoll
_j0
_ismbcsymbol
_finite
_controlfp
_amsg_exit
__isascii
__dllonexit
_Strftime
_CxxThrowException
_CIsqrt
_CIsin
_CIpow
_CIcos
_CIatan
_CIasin

kernel32

_lopen
WriteTapemark
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualAlloc
UnhandledExceptionFilter
TryEnterCriticalSection
TerminateProcess
SizeofResource
SetThreadContext
RtlUnwind
ReleaseMutex
ReadFile
QueueUserAPC
QueryPerformanceCounter
OutputDebugStringA
MultiByteToWideChar
Module32Next
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedExchange
InterlockedCompareExchange
InitializeCriticalSection
GlobalDeleteAtom
GetVersion
GetTickCount
ClearCommBreak
CloseHandle
CreateFileA
CreateMutexA
CreateThread
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FreeLibrary
GetCommProperties
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
GetLastError
GetMailslotInfo
GetModuleFileNameA
GetModuleHandleA
GetProcessAffinityMask
GetProcessPriorityBoost
GetSystemTimeAsFileTime

dinput

DirectInputCreateA

Exports

Exports

Dir
IndexError
IsSubclass
Long_AsLongLong
Number_Coerce
SetDefaults
SetObject
get_hIST
get_user_width_max

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7cb51469d22499db4ff9953411172933

Headers

File Characteristics

Imports

advapi32

ole32

gdi32

msvcrt

kernel32

dinput

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 74KB

.rdata Size: 265KB - Virtual size: 265KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 75KB - Virtual size: 74KB

.rdata
Size: 265KB - Virtual size: 265KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 4KB