3849ad9d96bbc858426ed2f42e7d379fd2eed291708fe3179c26ffdc752d3112

General

Target

3849ad9d96bbc858426ed2f42e7d379fd2eed291708fe3179c26ffdc752d3112
Size

616KB
MD5

a768fc77e4f5ecd4d80bff302e5923e0
SHA1

3c7dbec5ca96ebf431ea97c10851a5cf67675ddb
SHA256

3849ad9d96bbc858426ed2f42e7d379fd2eed291708fe3179c26ffdc752d3112
SHA512

9c812c10b02f386827d18ee090b8e0f377e66422d8e517e5b09fa9a9ba5ce92472cd0e778399e5161dcdeb2cf489b8dc250f961f512cc62b7f11f0d65afa7837
SSDEEP

6144:pZBkxqfJ5RIMQxvGw83ohFCFEbNdaBsR1NT0PSq46w82RnyQ+uTSDqbwpdVGFVI8:XBkC3MxJhICNWs3NYV9syQVwzyas

Score

N/A

Malware Config

Signatures

Files

3849ad9d96bbc858426ed2f42e7d379fd2eed291708fe3179c26ffdc752d3112
.dll windows x86

72cce5bf003d20027471dc8c81c25c1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_ftol
calloc
_CIpow
atof
bsearch
strcpy
malloc
fopen
_stricmp
fread
atol
printf
fclose
strncmp
fgets
_iob
sqrt
fseek
rand
memcpy
_filbuf
fwrite
_assert
exit
sprintf
realloc
abort
fprintf
getenv
ungetc
strtok
memcmp
atoi
strcmp
sscanf
memmove
memset
free
ftell
strstr

user32

GetDC
GetParent
GetDesktopWindow
GetWindowRect
UnhookWindowsHookEx
ClientToScreen
DestroyWindow
GetClientRect
GetWindowThreadProcessId
WindowFromDC
wsprintfA
ReleaseDC
FillRect
MessageBoxA

kernel32

TlsGetValue
GetTickCount
GlobalFree
GetVersionExA
LeaveCriticalSection
VirtualFree
GlobalSize
Sleep
CreateFileA
DeleteCriticalSection
SetThreadPriority
LoadLibraryA
GetLastError
TlsSetValue
TlsAlloc
VirtualAlloc
GetDateFormatA
WriteFile
EnterCriticalSection
SetLastError
GetTempPathA
GlobalAlloc
FreeLibrary
TlsFree
GetProcAddress
GetModuleFileNameA
GetCurrentThread
GetModuleHandleA
GetStartupInfoA
GetCurrentThreadId
InitializeCriticalSection

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

GeneratorExit
HashNotImplemented
Long_FromSsize_t
Release

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72cce5bf003d20027471dc8c81c25c1a

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 187KB

.rdata Size: 100KB - Virtual size: 98KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 204KB - Virtual size: 202KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 188KB - Virtual size: 187KB

.rdata
Size: 100KB - Virtual size: 98KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 204KB - Virtual size: 202KB

.reloc
Size: 8KB - Virtual size: 7KB