60a228513a49211395cecfb9ad109c6ef326c6efc39c2171ba0c6b21b99c6669

General

Target

60a228513a49211395cecfb9ad109c6ef326c6efc39c2171ba0c6b21b99c6669
Size

584KB
MD5

6f4d68f1e8383c13b6121d6b33e21140
SHA1

f57ac75096961d74a05ee1ac88063f3d357a6c8e
SHA256

60a228513a49211395cecfb9ad109c6ef326c6efc39c2171ba0c6b21b99c6669
SHA512

27cb243d3c089078591140df4e0bae7dde6ab834f9ad5543c32cd59c46d11f5619b87f9d77866fe041bf4394f6f330ae7a5be85cf1ad2c46bb88ea5b26f52797
SSDEEP

12288:Kp03uic/kFPQj+TbxBlJV2Th7cf+gAst5L:N3uicLyxBlHOh7cft5L

Score

N/A

Malware Config

Signatures

Files

60a228513a49211395cecfb9ad109c6ef326c6efc39c2171ba0c6b21b99c6669
.dll windows x86

54210096509e47b17b31f1353e416ea7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PrintWindow
GetWindowRect
MessageBoxA
GetWindowThreadProcessId
GetDC
WindowFromDC
wsprintfA
GetParent
ReleaseDC

kernel32

GetCurrentThreadId
IsBadReadPtr
GlobalAlloc
GetModuleHandleA
TlsAlloc
GetModuleFileNameA
SetThreadPriority
SetLastError
EnterCriticalSection
CreateFileA
GlobalSize
GetVersionExA
TlsFree
GetStartupInfoA
QueryPerformanceCounter
GetLastError
VirtualAlloc
VirtualFree
TlsSetValue
LeaveCriticalSection
Sleep
DeleteCriticalSection
GetDateFormatA
GlobalFree
GetProcAddress
LoadLibraryA
GetTickCount
FreeLibrary
InitializeCriticalSection
TlsGetValue

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

strtok
fread
fgets
_ftol
fclose
calloc
free
memcpy
atol
rand
strcpy
bsearch
strstr
ftell
strncmp
memmove
_stricmp
atoi
exit
malloc
sqrt
abort
fwrite
sscanf
_iob
sprintf
_CIpow
memset
getenv
printf
fprintf
strcmp
fopen
fseek
_assert

Exports

Exports

IncrementalEncoder
InteractLoop
Realloc
vExecTokenA

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54210096509e47b17b31f1353e416ea7

Headers

File Characteristics

Imports

user32

kernel32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 175KB

.rdata Size: 72KB - Virtual size: 70KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 212KB - Virtual size: 210KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 176KB - Virtual size: 175KB

.rdata
Size: 72KB - Virtual size: 70KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 212KB - Virtual size: 210KB

.reloc
Size: 8KB - Virtual size: 7KB