0db0823307d4d31c4adfb2d19352b362b4f0b12cfb6e552704ec8285406a6e24

General

Target

0db0823307d4d31c4adfb2d19352b362b4f0b12cfb6e552704ec8285406a6e24
Size

620KB
MD5

af8b3f147707c42fd649765433624ad0
SHA1

dc5fb073d8b05799e950221e803f69f9d8731d5d
SHA256

0db0823307d4d31c4adfb2d19352b362b4f0b12cfb6e552704ec8285406a6e24
SHA512

b4a99cb69a5f7586cbe618d38c7dd52e02e8749a226d84b400811a7747ffcf4dcacf7f01a05022af5c01076ad23a6d47ecbb2e4061117815c2a17af42d97535a
SSDEEP

12288:dENHzx58jUUpLKzD+ObPw1yJYzxsib52ic99AIKyUfM2E3:6TnTUpLGD+LliibvO9A5fM2W

Score

N/A

Malware Config

Signatures

Files

0db0823307d4d31c4adfb2d19352b362b4f0b12cfb6e552704ec8285406a6e24
.dll windows x86

413779a135d9f86ea5feb889fd552ab3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
TlsFree
GetVersionExA
GetModuleHandleA
LoadLibraryA
GlobalSize
SetLastError
GlobalAlloc
IsBadReadPtr
GetProcAddress
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
GetLastError
DeleteCriticalSection
GetTickCount
GetCurrentThread
FreeLibrary
QueryPerformanceCounter
TlsAlloc
WriteFile
GlobalFree
FlushConsoleInputBuffer
EnterCriticalSection
SetThreadPriority
TlsGetValue
Sleep
GetModuleFileNameA
GetDateFormatA
LeaveCriticalSection
CreateFileA
VirtualAlloc
GetTempPathA
VirtualFree

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

user32

MessageBoxA
UnhookWindowsHookEx
FillRect
GetParent
WINNLSGetEnableStatus
GetClientRect
ReleaseDC
GetWindowThreadProcessId
DestroyWindow
GetDC
WindowFromDC
wsprintfA

msvcrt

atol
free
atoi
strstr
realloc
ftell
fwrite
sprintf
_stricmp
ungetc
strncmp
strcmp
sscanf
exit
_CIpow
getenv
fopen
bsearch
printf
strtok
malloc
_ftol
memmove
calloc
strcpy
rand
_assert
_iob
fgets
fclose
abort
fseek
fread
atof
fprintf
memcpy

Exports

Exports

GetLocals
OverflowError
SetItem
StringARepr
_Tuple

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

413779a135d9f86ea5feb889fd552ab3

Headers

File Characteristics

Imports

kernel32

advapi32

user32

msvcrt

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 187KB

.rdata Size: 100KB - Virtual size: 99KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 208KB - Virtual size: 204KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 188KB - Virtual size: 187KB

.rdata
Size: 100KB - Virtual size: 99KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 208KB - Virtual size: 204KB

.reloc
Size: 8KB - Virtual size: 7KB