8eca8719d0b60f7b6915512a877cce31b4f540105835d17f913ca42b943e6386

General

Target

8eca8719d0b60f7b6915512a877cce31b4f540105835d17f913ca42b943e6386
Size

728KB
MD5

c43a2d5bbe104d9f5b878b0042613bf0
SHA1

30236ca2d63d4b7c6969d07350ba5475b0b54538
SHA256

8eca8719d0b60f7b6915512a877cce31b4f540105835d17f913ca42b943e6386
SHA512

ba1bc1d1266da99caaa78791e960c74b028e1251a02b79a8228cccde60f234926fd6a718b5f1cb05cc59d0e1f0e99c547609bfe9195a29405b3daae7c1cf3f70
SSDEEP

12288:ZqrxWZ5irUZ1rzLH5HiJf6fV/g6ESIRtj28x:0rA5irUZ1XlHiooHSYj28

Score

N/A

Malware Config

Signatures

Files

8eca8719d0b60f7b6915512a877cce31b4f540105835d17f913ca42b943e6386
.dll windows x86

d14058d98d2572bf4feb87898097012b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
GetParent
MessageBoxA
ReleaseDC
GetDC
wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

msvcrt

_CIpow
atol
ftell
strcpy
memmove
sprintf
fopen
fclose
_ftol
strcmp
strncmp
_stricmp
strtok
strstr
sscanf
memset
malloc
fwrite
fgets
fprintf
fread
_iob
getenv
rand
exit
_assert
fseek
memcpy
free
realloc
abort

kernel32

IsBadReadPtr
VirtualFree
EnterCriticalSection
GlobalAlloc
SetThreadPriority
GetStartupInfoA
TlsAlloc
GetModuleHandleA
VirtualAlloc
QueryPerformanceCounter
GetProcAddress
TlsGetValue
LeaveCriticalSection
GetModuleFileNameA
GetCurrentThreadId
Sleep
GlobalFree
GlobalSize
SetLastError
InitializeCriticalSection
DeleteCriticalSection
GetTickCount
CreateFileA
LoadLibraryA
TlsSetValue
GetDateFormatA
FreeLibrary
GetLastError
TlsFree

Exports

Exports

AcquireThread
AsDecodedString
Exception
WithFilenameObjectStr

Sections

.text
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d14058d98d2572bf4feb87898097012b

Headers

File Characteristics

Imports

user32

advapi32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 192KB - Virtual size: 188KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 256KB - Virtual size: 256KB

.rsrc Size: 204KB - Virtual size: 203KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 192KB - Virtual size: 188KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 256KB - Virtual size: 256KB

.rsrc
Size: 204KB - Virtual size: 203KB

.reloc
Size: 8KB - Virtual size: 7KB