af4925c45b5cc21dda12d9cd9cd85b881c0116746c3fcf861be6280671234bce

Sharing

Copy URL

Twitter E-mail

General

Target

af4925c45b5cc21dda12d9cd9cd85b881c0116746c3fcf861be6280671234bce
Size

446KB
MD5

962ce603f6c77f6b4be0533287ec8717
SHA1

ccd20a72288ade8a5c91cd94aafb46b52275a0a4
SHA256

af4925c45b5cc21dda12d9cd9cd85b881c0116746c3fcf861be6280671234bce
SHA512

603267f596e95a328cac749ae31d64e0ea747bd0f314ac50fee15db01d9867aafe35f2a1e600028609b405ebd99bbb2a7e52a16059ed74832d9e69e4d62aad46
SSDEEP

12288:w4BcGx6/txvFary/kLuJJzOVjB4ANDD+J7b:nHetxvFahLuPOFXliJ7

Score

N/A

Malware Config

Signatures

Files

af4925c45b5cc21dda12d9cd9cd85b881c0116746c3fcf861be6280671234bce
.dll windows x86

b0ba70c316c8b27b19d0489a4c24566d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
RtlUnwind
RtlZeroMemory
SetFilePointerEx
SetThreadContext
LoadResource
SizeofResource
TerminateProcess
TryEnterCriticalSection
VirtualAlloc
WaitForMultipleObjects
WaitForSingleObject
WriteTapemark
_hread
LoadLibraryA
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedExchange
InterlockedCompareExchange
CloseHandle
GetVersion
GetTickCount
GetSystemTimeAsFileTime
GetProcessPriorityBoost
GetModuleHandleA
GetLastError
GetDevicePowerState
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
FreeLibrary
FlushFileBuffers
FindResourceA
ExitProcess
EnterCriticalSection
CreateMutexA
SetupComm

dinput

DirectInputCreateA

ole32

CreateStreamOnHGlobal

advapi32

CloseTrace
RegCloseKey
RegEnumKeyExA
LsaClose

gdi32

ExtTextOutA
DeleteObject
DeleteDC
CreateFontIndirectW
GdiGetBatchLimit
CreateDIBSection
CreateCompatibleDC
CloseFigure
GetObjectA
GetTextMetricsA
GetTextMetricsW
SelectObject
SetTextAlign
SetBkMode
CreateFontIndirectA
SetMapMode

msvcrt

_ismbclower
wcsncpy
_CIcos
_CIsqrt
_CxxThrowException
_XcptFilter
__CxxLongjmpUnwind
__RTDynamicCast
__dllonexit
__p__winver
_amsg_exit
_atoi64
_finite
_gcvt
_initterm
_j0
_mbsicoll
_mbsncat
_stricmp
_unlock
_vsnprintf
floor
free
iswspace
malloc
sqrt
tolower

Exports

Exports

AsDouble
GC_UnTrack
GetFuncName
get_user_height_max
set_sPLT

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0ba70c316c8b27b19d0489a4c24566d

Headers

File Characteristics

Imports

kernel32

dinput

ole32

advapi32

gdi32

msvcrt

Exports

Exports

Sections

.text Size: 77KB - Virtual size: 76KB

.rdata Size: 253KB - Virtual size: 253KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 40KB - Virtual size: 39KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 77KB - Virtual size: 76KB

.rdata
Size: 253KB - Virtual size: 253KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 40KB - Virtual size: 39KB

.reloc
Size: 5KB - Virtual size: 4KB