1ef7c2465b21898a097f9830743fe2997aa03576f7d2909c3c52ea696d723469

General

Target

1ef7c2465b21898a097f9830743fe2997aa03576f7d2909c3c52ea696d723469
Size

308KB
MD5

22b26841eadc33c36e3f4f7383e7ae70
SHA1

11c619ca70790e1683f3acfadfafd49de0b8f91e
SHA256

1ef7c2465b21898a097f9830743fe2997aa03576f7d2909c3c52ea696d723469
SHA512

28ee3dc56ed4e9f0d6930c085dfa8aeb413c2648781c91cb5146f558e412f46dd38a7fb10d498132f5c518421d4d7250895e714ab6354ea412ac58efede2d245
SSDEEP

6144:almXQnCeIxNJeoubKT4YdjMhqh9WUqr4:5XCCR58OT4BhqHiE

Score

N/A

Malware Config

Signatures

Files

1ef7c2465b21898a097f9830743fe2997aa03576f7d2909c3c52ea696d723469
.dll windows x86

72cce5bf003d20027471dc8c81c25c1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_ftol
calloc
_CIpow
atof
bsearch
strcpy
malloc
fopen
_stricmp
fread
atol
printf
fclose
strncmp
fgets
_iob
sqrt
fseek
rand
memcpy
_filbuf
fwrite
_assert
exit
sprintf
realloc
abort
fprintf
getenv
ungetc
strtok
memcmp
atoi
strcmp
sscanf
memmove
memset
free
ftell
strstr

user32

GetDC
GetParent
GetDesktopWindow
GetWindowRect
UnhookWindowsHookEx
ClientToScreen
DestroyWindow
GetClientRect
GetWindowThreadProcessId
WindowFromDC
wsprintfA
ReleaseDC
FillRect
MessageBoxA

kernel32

TlsGetValue
GetTickCount
GlobalFree
GetVersionExA
LeaveCriticalSection
VirtualFree
GlobalSize
Sleep
CreateFileA
DeleteCriticalSection
SetThreadPriority
LoadLibraryA
GetLastError
TlsSetValue
TlsAlloc
VirtualAlloc
GetDateFormatA
WriteFile
EnterCriticalSection
SetLastError
GetTempPathA
GlobalAlloc
FreeLibrary
TlsFree
GetProcAddress
GetModuleFileNameA
GetCurrentThread
GetModuleHandleA
GetStartupInfoA
GetCurrentThreadId
InitializeCriticalSection

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

InPlaceRshift
Int_FromSsize_t
IsSubclass
Method_Self
Values
_Fast
_New
info_init
write_rows

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72cce5bf003d20027471dc8c81c25c1a

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 107KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 44KB - Virtual size: 44KB

.rsrc Size: 76KB - Virtual size: 73KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 108KB - Virtual size: 107KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 76KB - Virtual size: 73KB

.reloc
Size: 12KB - Virtual size: 8KB