fee98a6373f2db1ece28f4a074e1d81b35b28aaa8b867111bf40e5ba5d98883b

Sharing

Copy URL

Twitter E-mail

General

Target

fee98a6373f2db1ece28f4a074e1d81b35b28aaa8b867111bf40e5ba5d98883b
Size

417KB
MD5

4566262d3d228176e9bd7973e34eb538
SHA1

6a3229176ec975c65754c38fec4e126f92bce60a
SHA256

fee98a6373f2db1ece28f4a074e1d81b35b28aaa8b867111bf40e5ba5d98883b
SHA512

3d2d1ec4d503b1abf8799daab44acb4adedc47111ecd615774a25f91b940b089863eacaa7928c6bf936b5ef6e6d3c1f355eaa6604eea438fbaf91c8593dc10d6
SSDEEP

6144:9ZWBtSOGNIS0cRgBtINJj7lp8wgRfJviteAyORLRwPo9Kq9wwkiYANZG:3WBtfGNh0c5n/7gWeAyONRw0P9dFZG

Score

N/A

Malware Config

Signatures

Files

fee98a6373f2db1ece28f4a074e1d81b35b28aaa8b867111bf40e5ba5d98883b
.dll windows x86

662edbadae7aac1e2587cc75834a6e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CreateStreamOnHGlobal

gdi32

DeleteDC
DeleteObject
ExtTextOutA
ExtTextOutW
GdiGetBatchLimit
GetFontLanguageInfo
GetObjectA
GetTextMetricsA
GetTextMetricsW
SelectObject
SetBkColor
SetBkMode
SetMapMode
SetTextAlign
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectA
CloseFigure
CreateFontIndirectW

kernel32

EnterCriticalSection
ExitProcess
FindResourceA
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
GetLastError
GetMailslotInfo
DisableThreadLibraryCalls
GetModuleHandleA
GetProcessAffinityMask
CreateThread
GetSystemTimeAsFileTime
GetTickCount
GetVersion
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
ReleaseMutex
RtlUnwind
SetThreadContext
SetupComm
SizeofResource
TerminateProcess
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualAlloc
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteTapemark
CreateMutexA
CreateFileA
CloseHandle
GetProcessPriorityBoost
GetModuleFileNameA

msvcrt

_XcptFilter
__CxxLongjmpUnwind
__RTDynamicCast
__dllonexit
__p__winver
_amsg_exit
_atoi64
_finite
_initterm
_j0
_stricmp
_unlock
_vsnprintf
floor
free
iswpunct
iswspace
malloc
qsort
sqrt
tolower
_CxxThrowException
_CIsqrt
_CIcos
_CIasin
_CIacos

dinput

DirectInputCreateA

advapi32

RegQueryValueExA
RegEnumKeyExA
CloseTrace
RegCloseKey

Exports

Exports

BaseException
BlockSetup
FromString
Int_FromSsize_t
Range_Type
_SetItem
permit_empty_plte
write_row

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

662edbadae7aac1e2587cc75834a6e7b

Headers

File Characteristics

Imports

ole32

gdi32

kernel32

msvcrt

dinput

advapi32

Exports

Exports

Sections

.text Size: 73KB - Virtual size: 73KB

.rdata Size: 249KB - Virtual size: 248KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 73KB - Virtual size: 73KB

.rdata
Size: 249KB - Virtual size: 248KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 3KB