632cbffdcb1c7953ab372821c8b5d5570d56f32140b858c2709eb9e6ddb9ae97

General

Target

632cbffdcb1c7953ab372821c8b5d5570d56f32140b858c2709eb9e6ddb9ae97
Size

372KB
MD5

612f523b93a7a3f6ee5227f4ba74db70
SHA1

e738a74b90685f61f1f635897a82fb7966d38db0
SHA256

632cbffdcb1c7953ab372821c8b5d5570d56f32140b858c2709eb9e6ddb9ae97
SHA512

09cc94ec83738caedc72fc42e8233af7877e6a83bd46269d5e407ae1d58598304fde54ad6ae519bcd67fa43f34dbcc2f1403364a542755a1cdcefe25c21d3cc5
SSDEEP

6144:qyzWNys33K8JmZka1K0X0Z4HI4Smnkod8Cr4HxWij5wCQ:qvq8JOkKM4obmdf4HwijSC

Score

N/A

Malware Config

Signatures

Files

632cbffdcb1c7953ab372821c8b5d5570d56f32140b858c2709eb9e6ddb9ae97
.dll windows x86

f82a64553290c3b7f760411c041e977c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
MessageBoxA
wsprintfA
ReleaseDC
GetDC
GetParent
GetWindowThreadProcessId

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

rand
fopen
exit
memset
strcmp
atol
_assert
atoi
abort
memcpy
_CIpow
free
realloc
malloc
strcpy
strstr
strtok
_stricmp
ftell
getenv
sscanf
_iob
fseek
sprintf
memmove
_ftol
fwrite
calloc
strncmp
fgets
fclose
fprintf
fread

kernel32

VirtualFree
DeleteCriticalSection
TlsGetValue
GetProcAddress
GetCurrentThreadId
GlobalAlloc
GlobalSize
GetDateFormatA
GetLastError
Sleep
InitializeCriticalSection
GetTickCount
QueryPerformanceCounter
SetLastError
CreateFileA
VirtualAlloc
SetThreadPriority
LeaveCriticalSection
TlsFree
GetStartupInfoA
GetModuleFileNameA
GetModuleHandleA
TlsSetValue
FreeLibrary
LoadLibraryA
IsBadReadPtr
TlsAlloc
EnterCriticalSection
GlobalFree

Exports

Exports

GetMin
IgnoreErrors
ParseString
ZeroDivisiError
get_io_ptr
vIsModuleLoaded

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f82a64553290c3b7f760411c041e977c

Headers

File Characteristics

Imports

user32

advapi32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 114KB

.rdata Size: 72KB - Virtual size: 69KB

.data Size: 92KB - Virtual size: 92KB

.rsrc Size: 76KB - Virtual size: 75KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 116KB - Virtual size: 114KB

.rdata
Size: 72KB - Virtual size: 69KB

.data
Size: 92KB - Virtual size: 92KB

.rsrc
Size: 76KB - Virtual size: 75KB

.reloc
Size: 12KB - Virtual size: 9KB