b7323ca1da38f00dced7d1e7dd29af7ed6041bcf44a6df392c3861224cd47b99

General

Target

b7323ca1da38f00dced7d1e7dd29af7ed6041bcf44a6df392c3861224cd47b99
Size

588KB
MD5

8e9feacec78b9d8e3d161d546f555940
SHA1

58467c13a7d6ad28397ed8e8f3a1a6316b0bd7d0
SHA256

b7323ca1da38f00dced7d1e7dd29af7ed6041bcf44a6df392c3861224cd47b99
SHA512

934b0de132be3a6c6fb2443e773eb1de1233fe82dae71bb70c27bc70442ca0d4016584217491a287c0cf9e3ab0fdf53e845ed84019b2b4f49ffb15ffc89b8ed4
SSDEEP

12288:SckG+crcSy8CaNW1A0SLFVhT+TuVYfHSsWV4kXQmtdTMN4:SAwSLzNGRTdfyhV4kXQmtdTMG

Score

N/A

Malware Config

Signatures

Files

b7323ca1da38f00dced7d1e7dd29af7ed6041bcf44a6df392c3861224cd47b99
.dll windows x86

882ee1fb90487eab4925db7e81d2443c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
ReleaseDC
UnhookWindowsHookEx
GetParent
GetWindowThreadProcessId
PrintWindow
MessageBoxA
GetClientRect
GetDC

msvcrt

fprintf
strcpy
fseek
getenv
_ftol
printf
fwrite
sscanf
_CIpow
fclose
memmove
_assert
atol
realloc
strncmp
exit
malloc
_stricmp
_iob
fread
memcpy
strcmp
bsearch
ftell
free
fopen
atoi
strstr
rand
abort
memset
sprintf
strtok
fgets
calloc
sqrt

kernel32

LeaveCriticalSection
GetStartupInfoA
QueryPerformanceCounter
TlsFree
GlobalFree
VirtualFree
GetCurrentThreadId
FlushConsoleInputBuffer
SetLastError
GetCurrentThread
GetLastError
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
Sleep
LoadLibraryA
GlobalSize
SetThreadPriority
VirtualAlloc
IsBadReadPtr
GetVersionExA
GlobalAlloc
GetTickCount
TlsAlloc
TlsSetValue
CreateFileA
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
GetDateFormatA
FreeLibrary

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

EOFError
ExecCodeModuleEx
GetInfo
Long_AsSsize_t
Warning
_SetSlice

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

882ee1fb90487eab4925db7e81d2443c

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

advapi32

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 175KB

.rdata Size: 80KB - Virtual size: 78KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 208KB - Virtual size: 206KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 176KB - Virtual size: 175KB

.rdata
Size: 80KB - Virtual size: 78KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 208KB - Virtual size: 206KB

.reloc
Size: 8KB - Virtual size: 7KB