f0d9263bf32462d871112298e780360575b3f72c960f88d67dbedcb56c352f22

General

Target

f0d9263bf32462d871112298e780360575b3f72c960f88d67dbedcb56c352f22
Size

584KB
MD5

3d21ed2cb81ac6c9215bbe83a3246b70
SHA1

ec4e1e7b0bd0d3339a49b9ecc71104b20f1676eb
SHA256

f0d9263bf32462d871112298e780360575b3f72c960f88d67dbedcb56c352f22
SHA512

b0fc9758b915f7135835c6997a1ebed3dbaf8fecfe2dc04b3827591b26989579c487e88de959b2c7762335c5251e158d0a17a61f892eab74f7bb4722dbe47216
SSDEEP

12288:GqIDeVP7SxzBHTUI2d5Yv1MclO7RnkhKEJG:GzqVP7SHzUI2Xg1buRnFEJG

Score

N/A

Malware Config

Signatures

Files

f0d9263bf32462d871112298e780360575b3f72c960f88d67dbedcb56c352f22
.dll windows x86

a159121022dceb8854af17f87a5a16a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
DeleteCriticalSection
GetVersionExA
GetModuleHandleA
GetLastError
VirtualFree
GetDateFormatA
TlsSetValue
GetModuleFileNameA
GetStartupInfoA
LoadLibraryA
TlsGetValue
LeaveCriticalSection
FreeLibrary
CreateFileA
GetCurrentThreadId
GlobalFree
GlobalSize
Sleep
EnterCriticalSection
GetTickCount
IsBadReadPtr
GlobalAlloc
InitializeCriticalSection
GetProcAddress
TlsAlloc
SetLastError
QueryPerformanceCounter
VirtualAlloc
TlsFree

msvcrt

getenv
sprintf
bsearch
strstr
realloc
free
malloc
strcmp
_assert
strcpy
fgets
_CIpow
strncmp
fseek
fprintf
exit
memmove
fread
_ftol
memcpy
fopen
ftell
calloc
atoi
fwrite
_stricmp
_iob
strtok
memset
rand
atol
sscanf
fclose
abort

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

user32

wsprintfA
GetParent
MessageBoxA
GetWindowRect
GetWindowThreadProcessId
WindowFromDC
ReleaseDC
GetDC

Exports

Exports

IncrementalEncoder
Resize
_flags
destroy_info_struct

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a159121022dceb8854af17f87a5a16a0

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

user32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 204KB - Virtual size: 203KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 204KB - Virtual size: 203KB

.reloc
Size: 12KB - Virtual size: 11KB