0ff95fd36eb235342d1d269acf1a63518baef429927c329e1598e45b97a27e28

Sharing

Copy URL

Twitter E-mail

General

Target

0ff95fd36eb235342d1d269acf1a63518baef429927c329e1598e45b97a27e28
Size

612KB
MD5

b9537394261637cdc61ea0714528fd00
SHA1

23b2c89044af8e306f846074c897872f52563a44
SHA256

0ff95fd36eb235342d1d269acf1a63518baef429927c329e1598e45b97a27e28
SHA512

a02929124cdf9f6568e6dd0703151fd4659f3306976e74ed2f004dfa27f9f152f4c22f08320d5a7c8023ed5f4f710963ec480834afcbc2c4fe3393e5734c52ae
SSDEEP

12288:R9wRkJO0j7edHnh7IOCoKfCyEqdXErjyWsSHVUpQmnP:wRk00GSOhUxdE+WV85n

Score

N/A

Malware Config

Signatures

Files

0ff95fd36eb235342d1d269acf1a63518baef429927c329e1598e45b97a27e28
.dll windows x86

543138e33cd816b5025f41501ca20df8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UnhookWindowsHookEx
GetWindowThreadProcessId
wsprintfA
GetDC
DestroyWindow
GetParent
MessageBoxA
FillRect
WindowFromDC
ClientToScreen
ReleaseDC
GetDesktopWindow
GetWindowRect
GetClientRect

kernel32

VirtualAlloc
GlobalFree
WriteFile
GetTickCount
GetCurrentThreadId
GetVersionExA
SetThreadPriority
GetLastError
GetCurrentThread
GetProcAddress
FreeLibrary
CreateFileA
Sleep
LeaveCriticalSection
GlobalAlloc
EnterCriticalSection
InitializeCriticalSection
LoadLibraryA
DeleteCriticalSection
TlsSetValue
SetLastError
GetDateFormatA
GetStartupInfoA
GetModuleFileNameA
TlsAlloc
VirtualFree
GetTempPathA
GlobalSize
TlsFree
TlsGetValue
GetModuleHandleA

ddraw

DirectDrawCreate

gdi32

GetGlyphOutlineA
SetDIBColorTable
GetRasterizerCaps
DescribePixelFormat
GetObjectA
ExtEscape
GetCurrentObject
CreateCompatibleBitmap
BitBlt
CreateDIBSection
DeleteObject
GetPaletteEntries
GetOutlineTextMetricsA
SelectObject
DeleteDC
GetPixelFormat
GetObjectType
CreateCompatibleDC
GetDeviceCaps
CreateFontIndirectA
CreateSolidBrush

msvcrt

memcpy
fclose
memset
memmove
_stricmp
fwrite
atof
_CIpow
printf
strcmp
getenv
memcmp
ftell
strncmp
realloc
_ftol
rand
fgets
qsort
fscanf
strcpy
exit
strtok
fopen
fprintf
_filbuf
atol
ungetc
bsearch
abort
malloc
fseek
sscanf
sqrt
_assert
fflush
atoi
_iob
sprintf
floor
fread
free
strstr
calloc

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

AsString
Int_Type
List_Size
Long_AsDouble
Member2_GetOne
Occurred
StringAEncode

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

543138e33cd816b5025f41501ca20df8

Headers

File Characteristics

Imports

user32

kernel32

ddraw

gdi32

msvcrt

advapi32

Exports

Exports

Sections

.text Size: 192KB - Virtual size: 191KB

.rdata Size: 88KB - Virtual size: 86KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 208KB - Virtual size: 207KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 192KB - Virtual size: 191KB

.rdata
Size: 88KB - Virtual size: 86KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 208KB - Virtual size: 207KB

.reloc
Size: 8KB - Virtual size: 7KB