0a080bd113635ba9488137922916c141b0639f52900edf34050947243524a93c

Sharing

Copy URL Twitter E-mail

General

Target

0a080bd113635ba9488137922916c141b0639f52900edf34050947243524a93c
Size

292KB
MD5

f76cb07b36518f677b710588f3f63bf0
SHA1

71efdaeda6673eb6cd55560568fa439fd65eee17
SHA256

0a080bd113635ba9488137922916c141b0639f52900edf34050947243524a93c
SHA512

9ad6e0484d7f20d9c262f15a025e4be3aa8352879fe9c1c7f5e331089eaad552ae8f89cf18e7ea89cbf4c0f3d4ef2a130cdd7744b05b7a9ddac11e85d340c856
SSDEEP

6144:YPZn1PBQ87T5q3xWlJVG/2vcmBpSfWJ7Wkfwf+uiBoBs:YP/BdqQw/wjGWZWkfwfviq

Score

N/A

Malware Config

Signatures

Files

0a080bd113635ba9488137922916c141b0639f52900edf34050947243524a93c
.dll windows x86

6640a673e40d9362d4e484a5dd09d4cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPixelFormat
CreateSolidBrush
DeleteDC
SelectObject
GetObjectA
ExtEscape
GetRasterizerCaps
GetObjectType
CreateDIBSection
DescribePixelFormat
GetPaletteEntries
GetCurrentObject
CreateCompatibleBitmap
GetDeviceCaps
GetOutlineTextMetricsA
BitBlt
CreateFontIndirectA
DeleteObject
CreateCompatibleDC
SetDIBColorTable
GetGlyphOutlineA

msvcrt

memmove
fopen
malloc
strtok
exit
strncmp
atol
floor
sprintf
fgets
_ftol
memcpy
abort
ftell
fclose
atoi
bsearch
_CIpow
_iob
rand
free
fprintf
strstr
fread
fseek
_stricmp
fflush
printf
memcmp
atof
sscanf
calloc
memset
_filbuf
fwrite
strcmp
ungetc
getenv
realloc
strcpy
_assert
sqrt

user32

GetDC
ClientToScreen
FillRect
GetDesktopWindow
GetClientRect
MessageBoxA
WindowFromDC
GetWindowRect
GetWindowThreadProcessId
wsprintfA
GetParent
DestroyWindow
UnhookWindowsHookEx
ReleaseDC

kernel32

GetLastError
GetCurrentThreadId
VirtualFree
DeleteCriticalSection
GetTempPathA
GetTickCount
LeaveCriticalSection
VirtualAlloc
LoadLibraryA
TlsSetValue
GetStartupInfoA
TlsFree
WriteFile
FreeLibrary
GetModuleFileNameA
GlobalAlloc
GlobalFree
GetCurrentThread
CreateFileA
Sleep
GlobalSize
SetLastError
InitializeCriticalSection
SetThreadPriority
GetVersionExA
GetDateFormatA
GetModuleHandleA
GetProcAddress
TlsAlloc
TlsGetValue
EnterCriticalSection

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Exports

Exports

BufferError
Int_FromSize_t
_FiniInterrupts
get_sPLT
set_cHRM_fixed
set_convert_alpha

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6640a673e40d9362d4e484a5dd09d4cf

Headers

File Characteristics

Imports

gdi32

msvcrt

user32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 93KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 44KB - Virtual size: 44KB

.rsrc Size: 76KB - Virtual size: 75KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 96KB - Virtual size: 93KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 76KB - Virtual size: 75KB

.reloc
Size: 8KB - Virtual size: 7KB