4233cd1333eb9a68386a112a5c75c4ebc876fea75df3030dd771c57f282de556

Sharing

Copy URL Twitter E-mail

General

Target

4233cd1333eb9a68386a112a5c75c4ebc876fea75df3030dd771c57f282de556
Size

632KB
MD5

ca4e9b3fcd29f485676b93a37369a330
SHA1

237a313cc141d4cf997affb46875a92a77630cb0
SHA256

4233cd1333eb9a68386a112a5c75c4ebc876fea75df3030dd771c57f282de556
SHA512

74f309f6b64bdf17b84f28119d8208179c17c72bc23b16f1908ae717240a9aaa9c61bd67e4be6bbe9001d3920c124b601597475bdd6795a1280abf87e0cd67c7
SSDEEP

12288:wmyXgvQ/C6+A+0QIXEvUb7k9aSF/gT5UtH1FVh2ND/4pn7iFq7TgVlxWQsCH1:wmyXuQ/Ta0JXMAWHSkpnuPVlknCV

Score

N/A

Malware Config

Signatures

Files

4233cd1333eb9a68386a112a5c75c4ebc876fea75df3030dd771c57f282de556
.dll windows x86

8003c02ca8d44e3d9ceb15026b199678

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreate

msvcrt

fread
bsearch
atol
fseek
realloc
memset
ungetc
ftell
strncmp
strcpy
calloc
malloc
_CIpow
fprintf
sprintf
strstr
getenv
abort
exit
printf
atoi
floor
free
memcmp
_iob
memmove
fscanf
fwrite
_assert
_filbuf
sqrt
_ftol
memcpy
sscanf
fflush
strtok
fclose
strcmp
rand
atof
fgets
fopen
qsort
_stricmp

kernel32

Sleep
DeleteCriticalSection
GetVersionExA
LoadLibraryA
GetLastError
TlsAlloc
GetStartupInfoA
GetModuleFileNameA
TlsSetValue
SetLastError
GlobalSize
FreeLibrary
TlsGetValue
LeaveCriticalSection
VirtualAlloc
GetModuleHandleA
GetThreadSelectorEntry
GetTickCount
GetDateFormatA
GlobalAlloc
GlobalFree
CreateFileA
TlsFree
OutputDebugStringA
GetCurrentThread
EnterCriticalSection
SetThreadPriority
InitializeCriticalSection
GetCurrentThreadId
WriteFile
GetProcAddress
GetTempPathA
VirtualFree

gdi32

CreateDIBSection
ExtEscape
DescribePixelFormat
SelectObject
BitBlt
CreateSolidBrush
CreateFontIndirectA
GetGlyphOutlineA
GetOutlineTextMetricsA
GetPaletteEntries
GetObjectType
GetRasterizerCaps
GetCurrentObject
DeleteObject
SetDIBColorTable
GetDIBits
GetDeviceCaps
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC

user32

MessageBoxA
DestroyWindow
GetDesktopWindow
GetWindowLongA
GetActiveWindow
GetClientRect
UnhookWindowsHookEx
WindowFromDC
GetParent
ReleaseDC
wsprintfA
GetDC
SetWindowsHookExA
GetWindowThreadProcessId
FillRect

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

Compare
Encoder
Format
ImportModule
Keys
Number_ToBase
StringADecode
TabError
_Concat

Sections

.text
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8003c02ca8d44e3d9ceb15026b199678

Headers

File Characteristics

Imports

ddraw

msvcrt

kernel32

gdi32

user32

advapi32

Exports

Exports

Sections

.text Size: 200KB - Virtual size: 197KB

.rdata Size: 100KB - Virtual size: 99KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 208KB - Virtual size: 207KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 200KB - Virtual size: 197KB

.rdata
Size: 100KB - Virtual size: 99KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 208KB - Virtual size: 207KB

.reloc
Size: 8KB - Virtual size: 7KB