3d1f74786514a60823be7823c8ff52e6fd6ff213a907b81d3bf6f8535f836be6

General

Target

3d1f74786514a60823be7823c8ff52e6fd6ff213a907b81d3bf6f8535f836be6
Size

596KB
MD5

0193e5716047b72c37c26ef23e6e3a20
SHA1

81619bff24993e0b31a4fcb429342a457b0988f6
SHA256

3d1f74786514a60823be7823c8ff52e6fd6ff213a907b81d3bf6f8535f836be6
SHA512

2b3d96b7e3ab38624a01df614adcdefe5ef4df2f2ce3eb5eb707fabda20c48c1a54feba22f5d9cec14a5dc806be7f6210cc65087eccb05a0f388680673a3adde
SSDEEP

12288:5mvWnOoYSRQgP1BZ2Z9Zd7rlSZlFTiURVE2HnGKyp9DR41TR+s:5mIOoF2k0xritiAE2HGKiXA

Score

N/A

Malware Config

Signatures

Files

3d1f74786514a60823be7823c8ff52e6fd6ff213a907b81d3bf6f8535f836be6
.dll windows x86

6c1131c0e9f0c07dc641b72c74804f55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

free
bsearch
memcpy
strncmp
_ftol
atol
fread
strcmp
_CIpow
fwrite
calloc
atoi
ftell
getenv
strstr
_stricmp
strtok
sprintf
exit
fprintf
malloc
strcpy
fseek
abort
memmove
rand
sqrt
_assert
fgets
fopen
fclose
_iob
realloc
memset

user32

MessageBoxA
GetDC
GetParent
GetWindowThreadProcessId
WindowFromDC
GetWindowRect
wsprintfA
ReleaseDC

kernel32

GetProcAddress
TlsFree
GlobalAlloc
GetStartupInfoA
GlobalSize
CreateFileA
GetVersionExA
SetLastError
EnterCriticalSection
GetTickCount
IsBadReadPtr
VirtualAlloc
DeleteCriticalSection
SetThreadPriority
GlobalFree
GetModuleFileNameA
VirtualFree
TlsAlloc
LoadLibraryA
Sleep
GetCurrentThreadId
TlsGetValue
TlsSetValue
LeaveCriticalSection
GetDateFormatA
InitializeCriticalSection
GetLastError
FreeLibrary
GetModuleHandleA
QueryPerformanceCounter

Exports

Exports

Display
EvalFrameEx
GetImporter
SimpleParseStringFlags
_flags
destroy_struct_2
get_valid
mmx_support

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c1131c0e9f0c07dc641b72c74804f55

Headers

File Characteristics

Imports

advapi32

msvcrt

user32

kernel32

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 187KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 204KB - Virtual size: 201KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 188KB - Virtual size: 187KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 204KB - Virtual size: 201KB

.reloc
Size: 12KB - Virtual size: 11KB