2634ec0cbdf49ea84751f2b39c85bec86858f32e26191f9c89af71840e55ae70

General

Target

2634ec0cbdf49ea84751f2b39c85bec86858f32e26191f9c89af71840e55ae70
Size

328KB
MD5

a4c45a50201d05b9d482b9380bd37160
SHA1

ad0c263d210826858718bd5af1271d29ea22d527
SHA256

2634ec0cbdf49ea84751f2b39c85bec86858f32e26191f9c89af71840e55ae70
SHA512

3394c12b16032fda4e091feebe12518ac92dfe88d24b4ae35f9ecf91064dbee747fcf44a4f50cea5272454931fc26de161710a2ebf1b5ac173711bda8b459e96
SSDEEP

6144:93uoxT+HZz73LYF/OMccEZ1AqidlW5zzzvA19BjmW+Tj9:MK8Zz77f7PAJrWJY19Bjq3

Score

N/A

Malware Config

Signatures

Files

2634ec0cbdf49ea84751f2b39c85bec86858f32e26191f9c89af71840e55ae70
.dll windows x86

13cc016404c0db0e9a00f7cc2b7a5e35

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetLastError
LeaveCriticalSection
SetLastError
GetTickCount
DeleteCriticalSection
GetDateFormatA
TlsAlloc
SetThreadPriority
GetCurrentThreadId
TlsSetValue
FreeLibrary
QueryPerformanceCounter
CreateFileA
EnterCriticalSection
Sleep
VirtualAlloc
GetVersionExA
GlobalFree
InitializeCriticalSection
GetModuleHandleA
GlobalAlloc
TlsGetValue
GetCurrentThread
FlushConsoleInputBuffer
TlsFree
VirtualFree
LoadLibraryA
GlobalSize
GetProcAddress
GetStartupInfoA
GetModuleFileNameA

msvcrt

fgets
sqrt
_iob
memcpy
strcpy
_ftol
free
fprintf
strncmp
calloc
fseek
atoi
strstr
rand
malloc
fwrite
strtok
_assert
_CIpow
fopen
fread
printf
fclose
atol
abort
_stricmp
strcmp
exit
memmove
sprintf
memset
bsearch
ftell
sscanf
getenv
realloc

user32

UnhookWindowsHookEx
wsprintfA
GetClientRect
PrintWindow
MessageBoxA
GetWindowRect
GetParent
GetDC
GetWindowThreadProcessId
WindowFromDC

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

AsFile
ReadShortFromFile
StringASize
UnicodeWarning
get_header_ver
get_tRNS
get_y_offset_pixels
info_init
set_gray_to_rgb

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13cc016404c0db0e9a00f7cc2b7a5e35

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

advapi32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 80KB - Virtual size: 77KB

.data Size: 44KB - Virtual size: 44KB

.rsrc Size: 84KB - Virtual size: 81KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 80KB - Virtual size: 77KB

.data
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 84KB - Virtual size: 81KB

.reloc
Size: 12KB - Virtual size: 10KB