0522411d614884c8fc20708ac9733d4541c7b1d8d9819c1b13b44e08188d7a06

General

Target

0522411d614884c8fc20708ac9733d4541c7b1d8d9819c1b13b44e08188d7a06
Size

384KB
MD5

0d13bd3dc0f17727a158bcfb4adce0a0
SHA1

cab832fbb46ab0ff4c152df835ea9494402a8be9
SHA256

0522411d614884c8fc20708ac9733d4541c7b1d8d9819c1b13b44e08188d7a06
SHA512

b7bf54d67d14f4f2421bb788a38fe6ab4665509a79bee5dd5864a92807d4da873cd69c73bdd15d5263d6a8afc5f771320d21947324b97f64393847da8da68207
SSDEEP

6144:o7SY+zoDOdar8EbdSX6yHpMkzKSeBT73dFZgf+V02B:cS5oDr8Ebi6cimBeBvZxd

Score

N/A

Malware Config

Signatures

Files

0522411d614884c8fc20708ac9733d4541c7b1d8d9819c1b13b44e08188d7a06
.dll windows x86

6c1131c0e9f0c07dc641b72c74804f55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

free
bsearch
memcpy
strncmp
_ftol
atol
fread
strcmp
_CIpow
fwrite
calloc
atoi
ftell
getenv
strstr
_stricmp
strtok
sprintf
exit
fprintf
malloc
strcpy
fseek
abort
memmove
rand
sqrt
_assert
fgets
fopen
fclose
_iob
realloc
memset

user32

MessageBoxA
GetDC
GetParent
GetWindowThreadProcessId
WindowFromDC
GetWindowRect
wsprintfA
ReleaseDC

kernel32

GetProcAddress
TlsFree
GlobalAlloc
GetStartupInfoA
GlobalSize
CreateFileA
GetVersionExA
SetLastError
EnterCriticalSection
GetTickCount
IsBadReadPtr
VirtualAlloc
DeleteCriticalSection
SetThreadPriority
GlobalFree
GetModuleFileNameA
VirtualFree
TlsAlloc
LoadLibraryA
Sleep
GetCurrentThreadId
TlsGetValue
TlsSetValue
LeaveCriticalSection
GetDateFormatA
InitializeCriticalSection
GetLastError
FreeLibrary
GetModuleHandleA
QueryPerformanceCounter

Exports

Exports

AnyFile
AttributeError
ClearFreeList
FromObjectMem
StringAType
SyntaxWarning
read_init_2

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c1131c0e9f0c07dc641b72c74804f55

Headers

File Characteristics

Imports

advapi32

msvcrt

user32

kernel32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 115KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 92KB - Virtual size: 92KB

.rsrc Size: 84KB - Virtual size: 83KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 116KB - Virtual size: 115KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 92KB - Virtual size: 92KB

.rsrc
Size: 84KB - Virtual size: 83KB

.reloc
Size: 12KB - Virtual size: 9KB