883728f026446cd082a8e26c3edb5fb3f43c4dcbcbf9ae1b61e707777fe626ba

General

Target

883728f026446cd082a8e26c3edb5fb3f43c4dcbcbf9ae1b61e707777fe626ba
Size

608KB
MD5

f5c2d452cbfb0ad112342ddec9393310
SHA1

a08ba2d7d58dc7e28c471c022dbec5b59c38678a
SHA256

883728f026446cd082a8e26c3edb5fb3f43c4dcbcbf9ae1b61e707777fe626ba
SHA512

114a868e2cccbff344d9942b46af73c03490fd6b91f8a68894b5da4897c2203eb2a593904a9cb0311c5186888d0d8ac80be352709068632a223dee88669ce269
SSDEEP

12288:CavdrMd7ipLBOwssA3F2tVkpO8WpFcOpiL0NSBIAFfgS:Td078LtK3F7O/pFFJgBhH

Score

N/A

Malware Config

Signatures

Files

883728f026446cd082a8e26c3edb5fb3f43c4dcbcbf9ae1b61e707777fe626ba
.dll windows x86

812b8d46bf824221fe36b8305e01f035

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
FreeLibrary
GetModuleFileNameA
LoadLibraryA
GetCurrentThread
IsBadReadPtr
VirtualFree
GetLastError
Sleep
TlsGetValue
InitializeCriticalSection
GetStartupInfoA
CreateFileA
LeaveCriticalSection
TlsSetValue
SetLastError
GetModuleHandleA
TlsAlloc
GlobalSize
SetThreadPriority
QueryPerformanceCounter
VirtualAlloc
GetVersionExA
GetTickCount
DeleteCriticalSection
EnterCriticalSection
GetProcAddress
FlushConsoleInputBuffer
GlobalFree
GetDateFormatA
TlsFree
GlobalAlloc

user32

GetParent
GetWindowThreadProcessId
GetDC
PrintWindow
GetWindowRect
UnhookWindowsHookEx
MessageBoxA
WindowFromDC
ReleaseDC
wsprintfA

msvcrt

_assert
getenv
free
rand
strcpy
strcmp
fprintf
atol
fread
fgets
memset
fwrite
strncmp
memmove
_ftol
atoi
sprintf
ftell
fclose
fopen
bsearch
strstr
malloc
_stricmp
fseek
strtok
_iob
sqrt
abort
printf
sscanf
calloc
exit
_CIpow
memcpy
realloc

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

Exports

Exports

AsCComplex
Hash
InPlaceXor
Instance_New
Module_GetFilename
ParseFileFlags
SetProfile
StringAConcat

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

812b8d46bf824221fe36b8305e01f035

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

advapi32

Exports

Exports

Sections

.text Size: 192KB - Virtual size: 191KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 208KB - Virtual size: 206KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 192KB - Virtual size: 191KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 208KB - Virtual size: 206KB

.reloc
Size: 12KB - Virtual size: 8KB