b5718b37ef8a6803358d33e587748e7afcf7830885606e0f49d1739fe53fd904

General

Target

b5718b37ef8a6803358d33e587748e7afcf7830885606e0f49d1739fe53fd904
Size

752KB
MD5

e1b4575efbdf8841d01a116ae036a640
SHA1

86558f319815e399d01ce63cef5bf07b3ddc15f9
SHA256

b5718b37ef8a6803358d33e587748e7afcf7830885606e0f49d1739fe53fd904
SHA512

f55ae02c25b4607a0fc7b1fda97774a59e38f0e68041aafdee92bcf011aa2655aaab963a70a81b21739b830b8ce8c9fc9abf7c416e035acdf28d1b12c757cdf5
SSDEEP

12288:iry7g9RVyyGkcR1NAQFwB+GvjbF311YtctHLhIIwV6N:ir4glyyujqQFwBZjbF31OctHLhvwwN

Score

N/A

Malware Config

Signatures

Files

b5718b37ef8a6803358d33e587748e7afcf7830885606e0f49d1739fe53fd904
.dll windows x86

0970d5c85e8f12ac25c2dc8ceac79396

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC
ReleaseDC
GetWindowRect
wsprintfA
GetParent
GetWindowThreadProcessId

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

msvcrt

fwrite
_assert
strcpy
exit
fread
strstr
sscanf
fprintf
atol
ftell
_ftol
strncmp
_iob
rand
strcmp
fclose
fgets
abort
realloc
malloc
memcpy
sprintf
getenv
memmove
_stricmp
fseek
atoi
calloc
fopen
memset
strtok
free
_CIpow

kernel32

TlsSetValue
GlobalFree
GlobalSize
GetProcAddress
GetLastError
EnterCriticalSection
GetTickCount
GetModuleFileNameA
VirtualFree
GetStartupInfoA
LeaveCriticalSection
GetDateFormatA
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
GlobalAlloc
FreeLibrary
CreateFileA
IsBadReadPtr
TlsFree
GetModuleHandleA
TlsGetValue
TlsAlloc
LoadLibraryA
Sleep
SetThreadPriority
SetLastError
VirtualAlloc

Exports

Exports

InPlaceMultiply
Node_ListTree
get_rows
write_image

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0970d5c85e8f12ac25c2dc8ceac79396

Headers

File Characteristics

Imports

user32

advapi32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 256KB - Virtual size: 256KB

.rsrc Size: 204KB - Virtual size: 202KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 256KB - Virtual size: 256KB

.rsrc
Size: 204KB - Virtual size: 202KB

.reloc
Size: 8KB - Virtual size: 7KB