9428f5a55b2246e36f998aa0e06fda290c5dfcafdb8f9fa89edad43a37147d9e

Sharing

Copy URL

Twitter E-mail

General

Target

9428f5a55b2246e36f998aa0e06fda290c5dfcafdb8f9fa89edad43a37147d9e
Size

25KB
MD5

642b21b1557923ec3d05219877bd2d0e
SHA1

a04343b28478f11a1e8106d78ff19d22d68ed174
SHA256

9428f5a55b2246e36f998aa0e06fda290c5dfcafdb8f9fa89edad43a37147d9e
SHA512

1f35ccaa71222fbf6ae14c19f07fb664a58ac77ecdf6f25af40c9d3e0260bc59b852c7aba1605b10149edaa893f3465fd337048a1c1bb55fdd25dd0a6c49d2d1
SSDEEP

384:qHWnhOC6tfHB4l1rJkcD3P762qhBYyw9oi5dBddnW/7X:Mk8TxHKyFTUdBqX

Score

N/A

Malware Config

Signatures

Files

9428f5a55b2246e36f998aa0e06fda290c5dfcafdb8f9fa89edad43a37147d9e
.exe windows x86

e8ffc6fc0ce2388dfc4ea9fec1a37d16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
QueryPerformanceCounter
FreeLibrary
GetSystemInfo
VirtualFree
GetCurrentThreadId
GetCurrentProcess
Sleep
LocalAlloc
LocalFree
GetModuleFileNameA
GetTickCount
TerminateProcess
VirtualAlloc
GetModuleHandleA
GetVersionExA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetProcAddress
LocalReAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter

dhcpcsvc

McastApiStartup

user32

IsRectEmpty
IntersectRect

ws2_32

WSAGetLastError

ntdll

NtCreateKey

msvcrt

_initterm
malloc
_CIexp
fflush
__CxxFrameHandler
sprintf
_CIpow
_adjust_fdiv
__dllonexit
_CxxThrowException
ftell
free
fopen
fseek
_purecall
_except_handler3
_CIsqrt
fclose
fwrite
_onexit
exp

ddraw

DDInternalUnlock
ReleaseDDThreadLock
AcquireDDThreadLock
DDInternalLock
D3DParseUnknownCommand
CompleteCreateSysmemSurface

advapi32

RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyA
RegOpenKeyExA

Sections

.textbss
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e8ffc6fc0ce2388dfc4ea9fec1a37d16

Headers

File Characteristics

Imports

kernel32

dhcpcsvc

user32

ws2_32

ntdll

msvcrt

ddraw

advapi32

Sections

.textbss Size: - Virtual size: 96KB

.text Size: 512B - Virtual size: 436B

.idata Size: 22KB - Virtual size: 22KB

.rdata Size: 512B - Virtual size: 32B

.data Size: 512B - Virtual size: 216B

.textbss
Size: - Virtual size: 96KB

.text
Size: 512B - Virtual size: 436B

.idata
Size: 22KB - Virtual size: 22KB

.rdata
Size: 512B - Virtual size: 32B

.data
Size: 512B - Virtual size: 216B