47e02099de9520b26a805db3d3e6470670e96178d2b086685b521e31705b3794

Sharing

Copy URL Twitter E-mail

General

Target

47e02099de9520b26a805db3d3e6470670e96178d2b086685b521e31705b3794
Size

600KB
MD5

4ffbbf576bc0d24ea3cba3e6c6c54360
SHA1

c767a66be0973f4a5705e079c543e40b547b8943
SHA256

47e02099de9520b26a805db3d3e6470670e96178d2b086685b521e31705b3794
SHA512

5b8230a6c599e39063845902d0bac22c920f1d238acdd3b7042a7c8a7c0c113c6a8645bed49937602d3077e93ddd4cfc0acb720feb450f28b6dfa85d924fd78f
SSDEEP

12288:IrU9Tb8+zUXmEbEE7ObSVlqR/vTHHt1asncIKatroB:Imb8+zczbEEKiERbtNrHx

Score

N/A

Malware Config

Signatures

Files

47e02099de9520b26a805db3d3e6470670e96178d2b086685b521e31705b3794
.dll windows x86

e9f512834dbde6131d72724e0d4dfe92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_stricmp
memcmp
fclose
abort
strcmp
free
strtok
getenv
qsort
exit
calloc
fopen
atoi
malloc
atof
floor
ftell
memset
bsearch
printf
memcpy
memmove
sprintf
fread
_filbuf
sscanf
fprintf
fseek
rand
_CIpow
_assert
realloc
fgets
fflush
strstr
_iob
fwrite
atol
sqrt
fscanf
ungetc
strncmp
strcpy
_ftol

kernel32

WriteFile
TlsAlloc
GetModuleHandleA
TlsSetValue
GetTickCount
GlobalFree
LoadLibraryA
OutputDebugStringA
GetProcAddress
EnterCriticalSection
GetStartupInfoA
GetVersionExA
VirtualFree
GlobalSize
SetThreadPriority
GetModuleFileNameA
SetLastError
VirtualAlloc
GetTempPathA
DeleteCriticalSection
GetLastError
CreateFileA
FreeLibrary
GlobalAlloc
InitializeCriticalSection
GetCurrentThread
TlsFree
GetCurrentThreadId
GetDateFormatA
TlsGetValue
Sleep
LeaveCriticalSection

user32

GetDC
ReleaseDC
WindowFromDC
UnhookWindowsHookEx
GetWindowThreadProcessId
DestroyWindow
GetParent
SetWindowsHookExA
FillRect
GetClientRect
wsprintfA
GetDesktopWindow
GetWindowRect
ClientToScreen
MessageBoxA

gdi32

GetPaletteEntries
BitBlt
CreateCompatibleBitmap
CreateFontIndirectA
SetDIBColorTable
GetPixelFormat
SelectObject
CreateSolidBrush
GetOutlineTextMetricsA
DeleteDC
GetObjectA
GetRasterizerCaps
ExtEscape
GetCurrentObject
DeleteObject
CreateDIBSection
GetObjectType
GetDeviceCaps
GetGlyphOutlineA
DescribePixelFormat
CreateCompatibleDC

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ddraw

DirectDrawCreate

Exports

Exports

Compare
Encoder
Format
ImportModule
Keys
Number_ToBase
StringADecode
TabError
_Concat

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9f512834dbde6131d72724e0d4dfe92

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

advapi32

ddraw

Exports

Exports

Sections

.text Size: 192KB - Virtual size: 191KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 204KB - Virtual size: 203KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 192KB - Virtual size: 191KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 204KB - Virtual size: 203KB

.reloc
Size: 8KB - Virtual size: 7KB