80a47547fb424f1e69d96efee1d02c9cc48aaf669846bdf5efd03a258eaea429

General

Target

80a47547fb424f1e69d96efee1d02c9cc48aaf669846bdf5efd03a258eaea429
Size

344KB
MD5

8917a960e07956dbf77493c3a79f68f0
SHA1

b999373623315e2e84f79c66dbc8302d7d91fce2
SHA256

80a47547fb424f1e69d96efee1d02c9cc48aaf669846bdf5efd03a258eaea429
SHA512

a0bd17aa96969b39b61db246a0faa3a79c7a82ba6c3f1df338d94522b78c291f66f9a8b64a09fa41860579e457d6f12cebb5539ac6f246e819061370c08c884a
SSDEEP

6144:2xuVS8PJwP9XiKMeT0k6RZeWHSSQzgtGWhZzsMOqcm3fa:F08KP9XztT0kKeBzgtGYs7TmP

Score

N/A

Malware Config

Signatures

Files

80a47547fb424f1e69d96efee1d02c9cc48aaf669846bdf5efd03a258eaea429
.dll windows x86

5e7a3e97c2ded8020e38ffd010eb72bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
GetWindowThreadProcessId
WindowFromDC
PrintWindow
UnhookWindowsHookEx
wsprintfA
ReleaseDC
MessageBoxA
GetWindowRect

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

kernel32

IsBadReadPtr
GetModuleHandleA
TlsAlloc
GlobalFree
GlobalAlloc
GetDateFormatA
DeleteCriticalSection
LoadLibraryA
EnterCriticalSection
VirtualFree
GetTickCount
FreeLibrary
SetThreadPriority
QueryPerformanceCounter
GetProcAddress
Sleep
SetLastError
GetModuleFileNameA
TlsSetValue
InitializeCriticalSection
GetStartupInfoA
VirtualAlloc
TlsFree
LeaveCriticalSection
GetCurrentThreadId
CreateFileA
GlobalSize
GetLastError
GetVersionExA
TlsGetValue

msvcrt

memcpy
bsearch
fwrite
exit
sqrt
fgets
fread
strstr
_stricmp
fseek
sscanf
memset
fclose
rand
atoi
fprintf
atol
free
_CIpow
fopen
calloc
ftell
memmove
abort
sprintf
strtok
strncmp
strcmp
printf
malloc
_iob
_ftol
getenv
realloc
_assert

Exports

Exports

List_GetItem
Module_Type
New
get_pHYs
set_shift

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e7a3e97c2ded8020e38ffd010eb72bc

Headers

File Characteristics

Imports

user32

advapi32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 114KB

.rdata Size: 88KB - Virtual size: 85KB

.data Size: 44KB - Virtual size: 44KB

.rsrc Size: 80KB - Virtual size: 78KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 116KB - Virtual size: 114KB

.rdata
Size: 88KB - Virtual size: 85KB

.data
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 80KB - Virtual size: 78KB

.reloc
Size: 12KB - Virtual size: 10KB