22dca401665d1eb550cc74b556ba3e9af6a2172624051d4d3f478eeaf160cf1a

General

Target

22dca401665d1eb550cc74b556ba3e9af6a2172624051d4d3f478eeaf160cf1a
Size

316KB
MD5

10ba1cc16f359f00ca08776b5124f0b0
SHA1

268fbf49950fd45926bf1c308e4fc6099cc763e5
SHA256

22dca401665d1eb550cc74b556ba3e9af6a2172624051d4d3f478eeaf160cf1a
SHA512

a764dba75a56edadab7ca7acaf6f0dc00bfde5f6e66f95270cc113b5fd680f781c4c38ed850af33736ef63d7ddfc006750f1baa363a9551d52fb25962ed28536
SSDEEP

6144:UWeZAbU+2yHI+5u98S5iSPzMOcuAdzVVQZ6UaHr8AP51rdNZB:UWe2bU+pHluWS5iSRQgaL8Ax1L

Score

N/A

Malware Config

Signatures

Files

22dca401665d1eb550cc74b556ba3e9af6a2172624051d4d3f478eeaf160cf1a
.dll windows x86

4d791b6f2339fd6de297c77711393843

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

GetDC
GetClientRect
UnhookWindowsHookEx
GetParent
WindowFromDC
GetWindowRect
WINNLSGetEnableStatus
wsprintfA
GetWindowThreadProcessId
ReleaseDC
PrintWindow
MessageBoxA

msvcrt

fwrite
fclose
atoi
_ftol
fseek
calloc
strstr
sqrt
memmove
bsearch
ftell
_stricmp
abort
getenv
strcmp
fread
atol
malloc
sprintf
realloc
_assert
memcpy
strncmp
strcpy
rand
sscanf
fprintf
printf
fopen
_CIpow
exit
free
memset
_iob
fgets
strtok

kernel32

GetModuleFileNameA
GetStartupInfoA
IsBadReadPtr
SetLastError
Sleep
EnterCriticalSection
VirtualAlloc
GetDateFormatA
GetProcAddress
GetModuleHandleA
FreeLibrary
GetVersionExA
InitializeCriticalSection
GetCurrentThreadId
GetTickCount
CreateFileA
LeaveCriticalSection
TlsSetValue
LoadLibraryA
QueryPerformanceCounter
GetLastError
TlsFree
VirtualFree
GetCurrentThread
SetThreadPriority
GlobalAlloc
DeleteCriticalSection
FlushConsoleInputBuffer
GlobalSize
GlobalFree
TlsGetValue
TlsAlloc

Exports

Exports

Decoder
DeprecationWarning
InPlaceMultiply
Method_Self
SetItemString
vInitA
write_end

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d791b6f2339fd6de297c77711393843

Headers

File Characteristics

Imports

advapi32

user32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 107KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 44KB - Virtual size: 44KB

.rsrc Size: 80KB - Virtual size: 78KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 108KB - Virtual size: 107KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 80KB - Virtual size: 78KB

.reloc
Size: 12KB - Virtual size: 11KB