3c1db70e62c970caf4911164f7cddbc7c4d8bc24c3f72b68647156406b53d9d9

General

Target

3c1db70e62c970caf4911164f7cddbc7c4d8bc24c3f72b68647156406b53d9d9
Size

232KB
MD5

db8916c4f5355272b62fa1cc9a62d790
SHA1

1371bdb9826b6b881f8e9ff67e54bd9e25f2ad0c
SHA256

3c1db70e62c970caf4911164f7cddbc7c4d8bc24c3f72b68647156406b53d9d9
SHA512

976a05df70e5f008aaa6296b824eecb945f0e544dc5fad4aa9c7b82ffad080f76099dc45a04277b3cd3f55ddae484b5608311ca7016cd6dbe4eb24b82bc535e9
SSDEEP

6144:Mx2xCa0Gf3fsrhK790OpngrqFtZs91OLtmbGW:MIxCaf3sEmegrqPCM7W

Score

N/A

Malware Config

Signatures

Files

3c1db70e62c970caf4911164f7cddbc7c4d8bc24c3f72b68647156406b53d9d9
.dll windows x86

841c87e54bd6fdf62ed5626bd6c65c30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
DeviceIoControl
DuplicateHandle
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetConsoleMode
GetEnvironmentVariableA
GetFileAttributesA
GetModuleHandleA
GetThreadContext
GetUserDefaultLCID
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapCreate
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LCMapStringW
MapViewOfFile
MultiByteToWideChar
PulseEvent
ResetEvent
SetErrorMode
SetHandleCount
SetLastError
TlsFree
VirtualFree
WriteConsoleW
lstrcmpA
lstrcmpiA

advapi32

GetSecurityInfo
LsaSetQuotasForAccount
RegConnectRegistryW
AccessCheckAndAuditAlarmA

msvcrt

strpbrk
malloc
__getmainargs
rand
__p__commode
fprintf
__set_app_type
exit

ole32

CoCancelCall
CreateClassMoniker

ddraw

DirectDrawEnumerateExA
GetSurfaceFromDC

crypt32

CryptInstallOIDFunctionAddress
CertGetIssuerCertificateFromStore

Exports

Exports

EnumTvValueRelease

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

841c87e54bd6fdf62ed5626bd6c65c30

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

ole32

ddraw

crypt32

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 124KB

.data Size: 96KB - Virtual size: 156KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 124KB - Virtual size: 124KB

.data
Size: 96KB - Virtual size: 156KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB