76a6c08ffe5e4ba1c7b5242b0ad15cc95b1758d2905d106c4e62c9621d6bc7d3

Sharing

Copy URL Twitter E-mail

General

Target

76a6c08ffe5e4ba1c7b5242b0ad15cc95b1758d2905d106c4e62c9621d6bc7d3
Size

404KB
MD5

c76a9bbe095b764c7385514cd00c9596
SHA1

16c57ace5abc9b1e5003b3adddd59f131b237b1e
SHA256

76a6c08ffe5e4ba1c7b5242b0ad15cc95b1758d2905d106c4e62c9621d6bc7d3
SHA512

df1d7eca95fa1389c1ed449dcde943e8844b01167c07eec0dda69268917010b4e45dede54a24c75ee4a0258a92dc306a84cd0c0a652b8cf10cd3544ad30bf4aa
SSDEEP

12288:q9MANgNUuiw7JC1r+sO+S9WOwdQSGkenLlQ5F0ZJteY:ENwVCxSondQSGken65qJtb

Score

N/A

Malware Config

Signatures

Files

76a6c08ffe5e4ba1c7b5242b0ad15cc95b1758d2905d106c4e62c9621d6bc7d3
.dll windows x86

555a9eb3170e49139b5f3e8152b17699

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
SystemFunction004
CloseTrace

msvcrt

_finite
_getsystime
_initterm
wcscoll
tolower
strlen
qsort
iswspace
free
floor
_vsnprintf
_unlock
_stricmp
_CIacos
_j0
_atoi64
_amsg_exit
_adj_fdiv_m16i
__p__winver
__dllonexit
__RTDynamicCast
__CxxLongjmpUnwind
_XcptFilter
_CxxThrowException
_CIsqrt
_CIcos
_CIasin

dinput

DirectInputCreateA

kernel32

InterlockedIncrement
WriteTapemark
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualAlloc
TryEnterCriticalSection
SetupComm
SetThreadContext
RtlUnwind
ReleaseMutex
ReadFile
QueryPerformanceCounter
CloseHandle
CreateMutexA
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
OutputDebugStringA
GetMailslotInfo
GetModuleHandleA
GetProcessAffinityMask
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetTickCount
GetVersion
InterlockedCompareExchange
InterlockedExchange
GetLastError
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LocalAlloc
MapUserPhysicalPagesScatter
MultiByteToWideChar

ole32

CreateStreamOnHGlobal

gdi32

SetBkMode
GetTextMetricsA
GetObjectA
SetMapMode
ExtTextOutA
DeleteObject
DeleteDC
CreateFontIndirectW
CreateFontIndirectA
CreateCompatibleDC
CloseFigure
SetTextAlign
ExtTextOutW

Exports

Exports

Encoder
List_Append
NoMemory
TypeError
destroy_write_struct
get_color_type
handle_as_unknown
set_write_fn

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

555a9eb3170e49139b5f3e8152b17699

Headers

File Characteristics

Imports

advapi32

msvcrt

dinput

kernel32

ole32

gdi32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 64KB

.rdata Size: 245KB - Virtual size: 244KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 245KB - Virtual size: 244KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 3KB