9565c243661cd0ce0fae4295444e3db68a1b809c6039b69d7f9b7c517501af41

Sharing

Copy URL

Twitter E-mail

General

Target

9565c243661cd0ce0fae4295444e3db68a1b809c6039b69d7f9b7c517501af41
Size

628KB
MD5

96065b8b70894b8eeb5ee7c6c2c15340
SHA1

c6ef193d4d4a63e382cf85600c4edced1f4e19bd
SHA256

9565c243661cd0ce0fae4295444e3db68a1b809c6039b69d7f9b7c517501af41
SHA512

fd8f3fbc9fe1463a7ddc40a6f677fbbfe1f7eadc0eb8092c78ed9b888333afa83a654dca88836c5dafac5cf22770d6003a195d03542356688f07778189e12317
SSDEEP

12288:POy/mvRCzf6YyVDkCp+TZoW0K3OKLJxF5O7fBOsc:PRevRCzfmWCSQK3rhIjBO

Score

N/A

Malware Config

Signatures

Files

9565c243661cd0ce0fae4295444e3db68a1b809c6039b69d7f9b7c517501af41
.dll windows x86

f771011cac84d5f8fab09c9d009c4e60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

ftell
ungetc
fclose
fgets
bsearch
exit
_CIpow
calloc
strcmp
qsort
sprintf
abort
_stricmp
strcpy
_filbuf
fflush
fwrite
sscanf
realloc
memcpy
getenv
memmove
strtok
atoi
strncmp
fopen
rand
malloc
_assert
free
printf
atol
fseek
atof
floor
sqrt
memcmp
fread
_iob
fscanf
strstr
memset
fprintf
_ftol

ddraw

DirectDrawCreate

user32

DestroyWindow
GetWindowThreadProcessId
UnhookWindowsHookEx
SetWindowsHookExA
ReleaseDC
FillRect
GetDesktopWindow
WindowFromDC
MessageBoxA
GetDC
wsprintfA
GetClientRect
GetParent
ClientToScreen
GetWindowRect

gdi32

DeleteDC
SetDIBColorTable
DescribePixelFormat
CreateFontIndirectA
GetPixelFormat
GetOutlineTextMetricsA
GetDeviceCaps
SelectObject
DeleteObject
GetCurrentObject
CreateDIBSection
GetPaletteEntries
CreateCompatibleDC
GetRasterizerCaps
CreateCompatibleBitmap
GetGlyphOutlineA
ExtEscape
GetObjectA
BitBlt
GetObjectType
CreateSolidBrush

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

GetStartupInfoA
GetTickCount
GlobalAlloc
GlobalFree
GetCurrentThread
GlobalSize
Sleep
DeleteCriticalSection
CreateFileA
GetLastError
TlsAlloc
SetThreadPriority
GetTempPathA
WriteFile
EnterCriticalSection
FreeLibrary
LeaveCriticalSection
InitializeCriticalSection
GetModuleHandleA
TlsSetValue
GetProcAddress
TlsFree
VirtualAlloc
LoadLibraryA
GetCurrentThreadId
TlsGetValue
OutputDebugStringA
GetVersionExA
SetLastError
GetModuleFileNameA
GetDateFormatA
VirtualFree

Exports

Exports

ASTFromFile
List_GetItem
RegisterError
destroy_read_struct
get_IHDR

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f771011cac84d5f8fab09c9d009c4e60

Headers

File Characteristics

Imports

msvcrt

ddraw

user32

gdi32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 208KB - Virtual size: 207KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 212KB - Virtual size: 211KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 208KB - Virtual size: 207KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 212KB - Virtual size: 211KB

.reloc
Size: 12KB - Virtual size: 11KB