731109ccf87b94442f8763642804416102c02f41336fb68e85d86aab3797fc1a

General

Target

731109ccf87b94442f8763642804416102c02f41336fb68e85d86aab3797fc1a
Size

756KB
MD5

f9120428dd1255113f120bb78decdf70
SHA1

ad8ff5b020b709f5211f50e38628d0ad68d5192a
SHA256

731109ccf87b94442f8763642804416102c02f41336fb68e85d86aab3797fc1a
SHA512

ef7689e5ccd05c7ac0075b3fd49df60e20afdb183160ddb7e8a5de276e319f8fcc7c9941433f63abbfb14bff51243f3cd41544cc5b5bdf895364557ed2029033
SSDEEP

12288:ZUO2tAXl7AWk6JXUyPnJz29myojItI1cT76vcbZ:ZUwl7AyJXUWz29Ob1cTim

Score

N/A

Malware Config

Signatures

Files

731109ccf87b94442f8763642804416102c02f41336fb68e85d86aab3797fc1a
.dll windows x86

f82a64553290c3b7f760411c041e977c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
MessageBoxA
wsprintfA
ReleaseDC
GetDC
GetParent
GetWindowThreadProcessId

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

rand
fopen
exit
memset
strcmp
atol
_assert
atoi
abort
memcpy
_CIpow
free
realloc
malloc
strcpy
strstr
strtok
_stricmp
ftell
getenv
sscanf
_iob
fseek
sprintf
memmove
_ftol
fwrite
calloc
strncmp
fgets
fclose
fprintf
fread

kernel32

VirtualFree
DeleteCriticalSection
TlsGetValue
GetProcAddress
GetCurrentThreadId
GlobalAlloc
GlobalSize
GetDateFormatA
GetLastError
Sleep
InitializeCriticalSection
GetTickCount
QueryPerformanceCounter
SetLastError
CreateFileA
VirtualAlloc
SetThreadPriority
LeaveCriticalSection
TlsFree
GetStartupInfoA
GetModuleFileNameA
GetModuleHandleA
TlsSetValue
FreeLibrary
LoadLibraryA
IsBadReadPtr
TlsAlloc
EnterCriticalSection
GlobalFree

Exports

Exports

Int_FromSize_t
Int_FromSsize_t
SetAttrString
get_user_chunk_ptr
set_tIME

Sections

.text
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f82a64553290c3b7f760411c041e977c

Headers

File Characteristics

Imports

user32

advapi32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 200KB - Virtual size: 198KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 256KB - Virtual size: 256KB

.rsrc Size: 208KB - Virtual size: 207KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 200KB - Virtual size: 198KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 256KB - Virtual size: 256KB

.rsrc
Size: 208KB - Virtual size: 207KB

.reloc
Size: 12KB - Virtual size: 11KB