d16a2fcb206d17d7c3b4bdf3106d5d7a9a4013abf182c093d5a5d143ff6d833e

General

Target

d16a2fcb206d17d7c3b4bdf3106d5d7a9a4013abf182c093d5a5d143ff6d833e
Size

250KB
MD5

30cf1ca9aed85b2f6f0d8b971b4c8694
SHA1

849b8fe6d7828fb4330d22ab9516b83193f56b6d
SHA256

d16a2fcb206d17d7c3b4bdf3106d5d7a9a4013abf182c093d5a5d143ff6d833e
SHA512

0ee024cb0d32389447f00cae6c9ff8f3728fe2f44d209d2cf6d667a141b7a5d72c83b1109e84ab08010b762d184b96cb1b62be2abe1b1e603b0c3d115c3552a6
SSDEEP

6144:fssLfRs+UIXv0Ty6gJ/cMGShCIg33EvdBq7:fTtsUXp6gJUMGZElBq

Score

N/A

Malware Config

Signatures

Files

d16a2fcb206d17d7c3b4bdf3106d5d7a9a4013abf182c093d5a5d143ff6d833e
.exe windows x86

122c1c6eae321bd562b382a4d31aeb4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strncpy
memcpy
fseek
ftell
fread
_CIsqrt
_CIlog
floor
ceil
_CIpow
malloc
free
sqrt
fabs
fclose
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
LoadLibraryA
GetProcAddress
HeapAlloc
HeapFree
FreeLibrary
GetLogicalDriveStringsA
TlsAlloc
GetVersionExA
HeapReAlloc

user32

ClipCursor
ShowCursor
GetWindowRect
SetCursorPos
DestroyWindow
InvalidateRect
ShowWindow
GetForegroundWindow
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
DestroyIcon
FillRect

gdi32

GetDeviceCaps
GetStockObject
GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel

winmm

timeEndPeriod
mciSendCommandA

Sections

.code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ta
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

src
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

122c1c6eae321bd562b382a4d31aeb4d

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

winmm

Sections

.code Size: 8KB - Virtual size: 7KB

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 512B - Virtual size: 320B

.ta Size: 2KB - Virtual size: 3KB

src Size: 224KB - Virtual size: 223KB

.code
Size: 8KB - Virtual size: 7KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 512B - Virtual size: 320B

.ta
Size: 2KB - Virtual size: 3KB

src
Size: 224KB - Virtual size: 223KB