7508c375d086b462d0a2a5b06c789ca1113ba39f8b7ff9be022875b616bc3181

General

Target

7508c375d086b462d0a2a5b06c789ca1113ba39f8b7ff9be022875b616bc3181
Size

364KB
MD5

0e6d5fb932dfb0384d1f996be2468320
SHA1

5bd8fe47e30cd0b67c3b8cdbc5ff8e0598f8bd0f
SHA256

7508c375d086b462d0a2a5b06c789ca1113ba39f8b7ff9be022875b616bc3181
SHA512

9bededd0d273932c04f17f8a72b330b0bc92490de3768b22b3bac73bd5b79b98f924311778836717a5e60bf59bb746fec9ba4cf04aef3f7ed30727a19d4b1594
SSDEEP

6144:+cq/elXOhXgs1PAnAYtbyVmJsC56PhDpr1LM1kQTDBZwt3j1eJ9l9+N:eelXWHPIAYfx5W1+jTDbK3Ud9

Score

N/A

Malware Config

Signatures

Files

7508c375d086b462d0a2a5b06c789ca1113ba39f8b7ff9be022875b616bc3181
.dll windows x86

616d55b0ae57392eee4364293d3d8308

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fseek
_ftol
realloc
fwrite
getenv
free
sprintf
rand
malloc
strtok
strstr
sqrt
strncmp
fclose
strcpy
atoi
exit
memmove
strcmp
fgets
atol
_assert
abort
printf
fprintf
sscanf
_iob
fopen
memcpy
memcmp
calloc
fread
bsearch
ftell
_stricmp
memset
_CIpow
ungetc
atof

user32

CreateMenu
FillRect
GetDC
GetWindowRect
GetParent
UnhookWindowsHookEx
wsprintfA
GetClientRect
MsgWaitForMultipleObjects
ClientToScreen
GetDesktopWindow
GetWindowThreadProcessId
ReleaseDC
MessageBoxA
WindowFromDC
DestroyWindow
MenuItemFromPoint

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetTickCount
TlsGetValue
CreateFileA
GetProcAddress
LeaveCriticalSection
TlsFree
CancelWaitableTimer
InitializeCriticalSection
SetLastError
GlobalAlloc
EnterCriticalSection
GetStartupInfoA
GetTempPathA
GetDateFormatA
GetCurrentThread
TlsSetValue
GlobalFree
HeapFree
GetVersionExA
FreeLibrary
VirtualAlloc
GetModuleHandleA
Sleep
GetCurrentThreadId
LoadLibraryA
VirtualFree
GetLastError
WriteFile
SetThreadPriority
GetModuleFileNameA
TlsAlloc
GlobalSize
DeleteCriticalSection

Exports

Exports

Number_FloorDivide
set_text
vGetToken
write_png

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

616d55b0ae57392eee4364293d3d8308

Headers

File Characteristics

Imports

msvcrt

user32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 115KB

.rdata Size: 108KB - Virtual size: 104KB

.data Size: 44KB - Virtual size: 44KB

.rsrc Size: 80KB - Virtual size: 79KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 116KB - Virtual size: 115KB

.rdata
Size: 108KB - Virtual size: 104KB

.data
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 80KB - Virtual size: 79KB

.reloc
Size: 12KB - Virtual size: 8KB