a57bd886bd382305f2a50a4a2ace30cbe4022c18b0be8a5ed4df65921d18f400

General

Target

a57bd886bd382305f2a50a4a2ace30cbe4022c18b0be8a5ed4df65921d18f400
Size

300KB
MD5

25b82258d4602cde4873555a0d002660
SHA1

04f844f3b051f978f3f52f1080ddad8d14f49725
SHA256

a57bd886bd382305f2a50a4a2ace30cbe4022c18b0be8a5ed4df65921d18f400
SHA512

ad82e822a71ef0d357d715c3563fe297eaea8b2fd56b1b3d866d96d4f04d57543f35e31d5f5e74ffa94f3cd48d71266f787a0657865ff584d7929a039ca53fee
SSDEEP

6144:RpASj47k4YJKzts68NFfERKW2wkt9vQ3GrZB1xDa:oSjwIKzts67KNwIQ3Grfu

Score

N/A

Malware Config

Signatures

Files

a57bd886bd382305f2a50a4a2ace30cbe4022c18b0be8a5ed4df65921d18f400
.dll windows x86

13cc016404c0db0e9a00f7cc2b7a5e35

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetLastError
LeaveCriticalSection
SetLastError
GetTickCount
DeleteCriticalSection
GetDateFormatA
TlsAlloc
SetThreadPriority
GetCurrentThreadId
TlsSetValue
FreeLibrary
QueryPerformanceCounter
CreateFileA
EnterCriticalSection
Sleep
VirtualAlloc
GetVersionExA
GlobalFree
InitializeCriticalSection
GetModuleHandleA
GlobalAlloc
TlsGetValue
GetCurrentThread
FlushConsoleInputBuffer
TlsFree
VirtualFree
LoadLibraryA
GlobalSize
GetProcAddress
GetStartupInfoA
GetModuleFileNameA

msvcrt

fgets
sqrt
_iob
memcpy
strcpy
_ftol
free
fprintf
strncmp
calloc
fseek
atoi
strstr
rand
malloc
fwrite
strtok
_assert
_CIpow
fopen
fread
printf
fclose
atol
abort
_stricmp
strcmp
exit
memmove
sprintf
memset
bsearch
ftell
sscanf
getenv
realloc

user32

UnhookWindowsHookEx
wsprintfA
GetClientRect
PrintWindow
MessageBoxA
GetWindowRect
GetParent
GetDC
GetWindowThreadProcessId
WindowFromDC

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

Display
EvalFrameEx
GetImporter
SimpleParseStringFlags
_flags
destroy_struct_2
get_valid
mmx_support

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13cc016404c0db0e9a00f7cc2b7a5e35

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

advapi32

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 40KB - Virtual size: 40KB

.rsrc Size: 80KB - Virtual size: 78KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 80KB - Virtual size: 78KB

.reloc
Size: 8KB - Virtual size: 7KB