6f5efd3a9d2089380d18b25b6aa398ef4975008887886a18b97870de5b931e33

Sharing

Copy URL Twitter E-mail

General

Target

6f5efd3a9d2089380d18b25b6aa398ef4975008887886a18b97870de5b931e33
Size

320KB
MD5

48d11419ff45f1964db28de6e1de9c30
SHA1

5a046bd6238b1a343f7cb3df12801cf0de7f31d8
SHA256

6f5efd3a9d2089380d18b25b6aa398ef4975008887886a18b97870de5b931e33
SHA512

27cd8b2dc796a09c89847aa3a0572a2595ffb0e250fe807f4ae9a6d8577a33a08a82c10a00e0762ba6029bb3396e783c17ed0c9c3e26c2a980577370b4722bbf
SSDEEP

6144:QAEbyhYdB3DZef5QHzIG5I0YCydiNudzi63Qh5sjmyK4:QBbAYH3D9zXycuzX

Score

N/A

Malware Config

Signatures

Files

6f5efd3a9d2089380d18b25b6aa398ef4975008887886a18b97870de5b931e33
.dll windows x86

185d51405b17c0ab905ee16165357856

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryMemoryResourceNotification
GlobalFree
GetLastError
VirtualFree
LoadLibraryA
InitializeCriticalSection
SetLastError
WriteFile
GetTempPathA
GetStartupInfoA
GetModuleFileNameA
TlsSetValue
GetProcAddress
GlobalSize
GetCurrentThreadId
GetTickCount
DeleteCriticalSection
VirtualAlloc
GetLargestConsoleWindowSize
Sleep
TlsFree
GetCurrentThread
SetThreadPriority
LeaveCriticalSection
FreeLibrary
GetModuleHandleA
EnterCriticalSection
GetDateFormatA
CreateFileA
GlobalAlloc
TlsAlloc
TlsGetValue
GetVersionExA

msvcrt

bsearch
atoi
strcmp
getenv
_CIpow
strstr
fseek
fread
fwrite
printf
rand
memmove
fgets
malloc
memcpy
sprintf
sqrt
_iob
ftell
_stricmp
fopen
ungetc
_ftol
atol
strtok
fclose
realloc
_assert
free
calloc
fprintf
memset
strcpy
atof
memcmp
strncmp
abort
exit
sscanf

user32

ReleaseDC
ClientToScreen
GetWindowRect
CreateCaret
GetDesktopWindow
MessageBoxA
wsprintfA
UnhookWindowsHookEx
GetWindowThreadProcessId
FillRect
WindowFromDC
GetDC
GetClientRect
GetParent
DestroyWindow
GetMouseMovePointsEx

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

BufferError
Clear
GetRestricted
Int_Fini
Restore
SetString
_Contains
_GetSlice
_strtoul

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

185d51405b17c0ab905ee16165357856

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

advapi32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 92KB - Virtual size: 91KB

.data Size: 44KB - Virtual size: 44KB

.rsrc Size: 80KB - Virtual size: 78KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 92KB - Virtual size: 91KB

.data
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 80KB - Virtual size: 78KB

.reloc
Size: 8KB - Virtual size: 6KB