78c71ce7bf89bc5438ea87f225f8432701151d966423133f04a955838975eaee

Sharing

Copy URL

Twitter E-mail

General

Target

78c71ce7bf89bc5438ea87f225f8432701151d966423133f04a955838975eaee
Size

442KB
MD5

7a90b46116683f3bdbe690aec8c19253
SHA1

b57d1f94f51974a142689e8aa87447633ffde126
SHA256

78c71ce7bf89bc5438ea87f225f8432701151d966423133f04a955838975eaee
SHA512

8e6dc17b4ea37d821d826d1efe38fb70f5deaf6847ae18f53a4b0c9ac876c8bdbaa8a8f98b9792d8803f079a118a54903a620b974b7d52a7f5de82a09825ec1a
SSDEEP

12288:wLDgcEey9C5b48JW5xYy90L/pOAtPwvBup8J0G:8Dg9eCC5qxYy90Dp3tPwv4KKG

Score

N/A

Malware Config

Signatures

Files

78c71ce7bf89bc5438ea87f225f8432701151d966423133f04a955838975eaee
.dll windows x86

662edbadae7aac1e2587cc75834a6e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CreateStreamOnHGlobal

gdi32

DeleteDC
DeleteObject
ExtTextOutA
ExtTextOutW
GdiGetBatchLimit
GetFontLanguageInfo
GetObjectA
GetTextMetricsA
GetTextMetricsW
SelectObject
SetBkColor
SetBkMode
SetMapMode
SetTextAlign
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectA
CloseFigure
CreateFontIndirectW

kernel32

EnterCriticalSection
ExitProcess
FindResourceA
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
GetLastError
GetMailslotInfo
DisableThreadLibraryCalls
GetModuleHandleA
GetProcessAffinityMask
CreateThread
GetSystemTimeAsFileTime
GetTickCount
GetVersion
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
ReleaseMutex
RtlUnwind
SetThreadContext
SetupComm
SizeofResource
TerminateProcess
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualAlloc
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteTapemark
CreateMutexA
CreateFileA
CloseHandle
GetProcessPriorityBoost
GetModuleFileNameA

msvcrt

_XcptFilter
__CxxLongjmpUnwind
__RTDynamicCast
__dllonexit
__p__winver
_amsg_exit
_atoi64
_finite
_initterm
_j0
_stricmp
_unlock
_vsnprintf
floor
free
iswpunct
iswspace
malloc
qsort
sqrt
tolower
_CxxThrowException
_CIsqrt
_CIcos
_CIasin
_CIacos

dinput

DirectInputCreateA

advapi32

RegQueryValueExA
RegEnumKeyExA
CloseTrace
RegCloseKey

Exports

Exports

Exception
List_Append
Number_Multiply
SimpleStringFlags
State_New
_New
_vsnprintf
check_sig
vGetFileA

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

662edbadae7aac1e2587cc75834a6e7b

Headers

File Characteristics

Imports

ole32

gdi32

kernel32

msvcrt

dinput

advapi32

Exports

Exports

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 269KB - Virtual size: 269KB

.data Size: 69KB - Virtual size: 69KB

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 269KB - Virtual size: 269KB

.data
Size: 69KB - Virtual size: 69KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 4KB - Virtual size: 3KB