f7c53ea49a95395983a99247fef1e9d999c1ccda09db2956921e48b45e140c4d

General

Target

f7c53ea49a95395983a99247fef1e9d999c1ccda09db2956921e48b45e140c4d
Size

608KB
MD5

a5dc1f0126986230f15cb619fbb286b0
SHA1

014826a47efff0c119c2483c1b4c9a7d9a64baa5
SHA256

f7c53ea49a95395983a99247fef1e9d999c1ccda09db2956921e48b45e140c4d
SHA512

6ae4284542db2c24e8eae1ae6048477e39fa4f644af905e60e3ff204919f5f69bfcdb5357f020d847ab5be9198a4361e6b9964f732274fe692a943ac9b1f5fd4
SSDEEP

12288:7Ur5RdLbmPIWqas5HDWfkHcxx36rpCA9Qr5NmDioifhA:ozd+PIW45N8fqr0WQfmDbifS

Score

N/A

Malware Config

Signatures

Files

f7c53ea49a95395983a99247fef1e9d999c1ccda09db2956921e48b45e140c4d
.dll windows x86

3cb0451154009389ca4003e565c07f64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcmp
abort
_assert
atol
sprintf
strstr
atoi
_stricmp
_iob
printf
strtok
calloc
fwrite
fprintf
strncmp
fopen
sqrt
malloc
realloc
memmove
fseek
ftell
getenv
_CIpow
bsearch
memcpy
strcpy
sscanf
free
rand
fread
memset
_ftol
exit
fgets
fclose

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

QueryPerformanceCounter
GetProcAddress
GetVersionExA
DeleteCriticalSection
GetModuleFileNameA
LoadLibraryA
FreeLibrary
FlushConsoleInputBuffer
GetStartupInfoA
SetLastError
LeaveCriticalSection
GetModuleHandleA
TlsSetValue
TlsFree
TlsAlloc
GetTempPathA
GlobalAlloc
VirtualFree
CreateFileA
GlobalFree
InitializeCriticalSection
SetThreadPriority
VirtualAlloc
GetCurrentThreadId
WriteFile
GetTickCount
GetLastError
GlobalSize
GetCurrentThread
EnterCriticalSection
Sleep
GetDateFormatA
IsBadReadPtr
TlsGetValue

user32

WindowFromDC
PrintWindow
UnhookWindowsHookEx
MessageBoxA
wsprintfA
GetDC
GetParent
WINNLSGetEnableStatus
GetWindowThreadProcessId
GetClientRect
ReleaseDC
GetWindowRect

Exports

Exports

FromFile
List_Size
get_image_width
write_chunk_data

Sections

.text
Size: 196KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3cb0451154009389ca4003e565c07f64

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

Exports

Exports

Sections

.text Size: 196KB - Virtual size: 192KB

.rdata Size: 80KB - Virtual size: 78KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 204KB - Virtual size: 201KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 196KB - Virtual size: 192KB

.rdata
Size: 80KB - Virtual size: 78KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 204KB - Virtual size: 201KB

.reloc
Size: 12KB - Virtual size: 10KB