94f9f9a715ac84987e565bc49e18690255c408158e94b143beae10cb3613c180

General

Target

94f9f9a715ac84987e565bc49e18690255c408158e94b143beae10cb3613c180
Size

596KB
MD5

f6e2c662c851e4b75dc33c450dcbf4a0
SHA1

11dac56dd694e6e08a65a5ecfe07fa6e9acc7276
SHA256

94f9f9a715ac84987e565bc49e18690255c408158e94b143beae10cb3613c180
SHA512

875f487850c82999747c03e3f1b35664f51a229c2cc6e975c8c5f42b9f0779a3c214e97a9c2672d834e564caf3e8ef04ff2ddd35419f2ae30216710769efdc74
SSDEEP

12288:yj92x3G7nOw+zEo/SO0Ul99uU8n93Op4vySDaZV+:yB2x39fx/F0O3uU89eaB+P

Score

N/A

Malware Config

Signatures

Files

94f9f9a715ac84987e565bc49e18690255c408158e94b143beae10cb3613c180
.dll windows x86

ca0bd7f85b76f27a48ec590fc079838d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

msvcrt

fseek
ftell
fwrite
strstr
fread
realloc
atoi
fclose
memcpy
fprintf
atof
free
strcpy
printf
strcmp
sprintf
strncmp
calloc
sscanf
bsearch
memmove
malloc
ungetc
getenv
fopen
atol
exit
memset
_stricmp
sqrt
_assert
_CIpow
abort
_iob
strtok
_ftol
rand

user32

ReleaseDC
GetWindowThreadProcessId
UnhookWindowsHookEx
GetClientRect
MessageBoxA
DestroyWindow
wsprintfA
WINNLSGetEnableStatus
GetDC
FillRect
PrintWindow
WindowFromDC

kernel32

GlobalSize
VirtualAlloc
GlobalFree
FreeLibrary
GetProcAddress
TlsSetValue
LeaveCriticalSection
WriteFile
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
FlushConsoleInputBuffer
GetStartupInfoA
GetModuleFileNameA
GetCurrentThread
LoadLibraryA
SetThreadPriority
GetModuleHandleA
VirtualFree
SetLastError
QueryPerformanceCounter
IsBadReadPtr
TlsAlloc
TlsFree
GetCurrentThreadId
GlobalAlloc
CreateFileA
GetTickCount
GetTempPathA
GetDateFormatA
EnterCriticalSection
GetLastError
Sleep
TlsGetValue

Exports

Exports

Clear
Free
GetSelf
Int_FromString
SetItem
SystemExit
WriteUnraisable
set_pHYs
vLoadModuleA

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca0bd7f85b76f27a48ec590fc079838d

Headers

File Characteristics

Imports

advapi32

msvcrt

user32

kernel32

Exports

Exports

Sections

.text Size: 192KB - Virtual size: 191KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 204KB - Virtual size: 203KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 192KB - Virtual size: 191KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 204KB - Virtual size: 203KB

.reloc
Size: 12KB - Virtual size: 10KB