67bf8546572a6beef503d9be95bfa97a0996f5b55bb66cb4d4deb0516a1e0497

Sharing

Copy URL Twitter E-mail

General

Target

67bf8546572a6beef503d9be95bfa97a0996f5b55bb66cb4d4deb0516a1e0497
Size

422KB
MD5

a2c16ea73a34d5fe4ba0ad16b56bc3bb
SHA1

32bfbac01f0ed071fa1e1ec1a31113967dfc9325
SHA256

67bf8546572a6beef503d9be95bfa97a0996f5b55bb66cb4d4deb0516a1e0497
SHA512

492d7298a0fa18b8e61dc319d1b3d13eba3eb19f3824a26420a7e0809010ec54798384f1c36b6b9989d3adeb42dbee568f6ac92abd3a4ef5dd8cc7a840fa0a10
SSDEEP

6144:lvjJg8fVWPB5/LeaVpoAozZYvfNIp2HxV3M79XO/J2WWMIjrhQTjCit1Z4H:l7K8fGKmCwuUHxV879XomwjC+

Score

N/A

Malware Config

Signatures

Files

67bf8546572a6beef503d9be95bfa97a0996f5b55bb66cb4d4deb0516a1e0497
.dll windows x86

555a9eb3170e49139b5f3e8152b17699

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
SystemFunction004
CloseTrace

msvcrt

_finite
_getsystime
_initterm
wcscoll
tolower
strlen
qsort
iswspace
free
floor
_vsnprintf
_unlock
_stricmp
_CIacos
_j0
_atoi64
_amsg_exit
_adj_fdiv_m16i
__p__winver
__dllonexit
__RTDynamicCast
__CxxLongjmpUnwind
_XcptFilter
_CxxThrowException
_CIsqrt
_CIcos
_CIasin

dinput

DirectInputCreateA

kernel32

InterlockedIncrement
WriteTapemark
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualAlloc
TryEnterCriticalSection
SetupComm
SetThreadContext
RtlUnwind
ReleaseMutex
ReadFile
QueryPerformanceCounter
CloseHandle
CreateMutexA
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
OutputDebugStringA
GetMailslotInfo
GetModuleHandleA
GetProcessAffinityMask
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetTickCount
GetVersion
InterlockedCompareExchange
InterlockedExchange
GetLastError
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LocalAlloc
MapUserPhysicalPagesScatter
MultiByteToWideChar

ole32

CreateStreamOnHGlobal

gdi32

SetBkMode
GetTextMetricsA
GetObjectA
SetMapMode
ExtTextOutA
DeleteObject
DeleteDC
CreateFontIndirectW
CreateFontIndirectA
CreateCompatibleDC
CloseFigure
SetTextAlign
ExtTextOutW

Exports

Exports

ClearFreeList
GetItem
ImportError
List_SetItem
SetAttr
String_Format
_GetSlice
set_rows

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

555a9eb3170e49139b5f3e8152b17699

Headers

File Characteristics

Imports

advapi32

msvcrt

dinput

kernel32

ole32

gdi32

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 68KB

.rdata Size: 253KB - Virtual size: 252KB

.data Size: 70KB - Virtual size: 71KB

.rsrc Size: 25KB - Virtual size: 25KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 69KB - Virtual size: 68KB

.rdata
Size: 253KB - Virtual size: 252KB

.data
Size: 70KB - Virtual size: 71KB

.rsrc
Size: 25KB - Virtual size: 25KB

.reloc
Size: 4KB - Virtual size: 3KB