62f5f1c4e8c969de22bc1cd8fefbbbb7be2fed72e9a3421dc8ecffc52c9a5f97

General

Target

62f5f1c4e8c969de22bc1cd8fefbbbb7be2fed72e9a3421dc8ecffc52c9a5f97
Size

584KB
MD5

2989693a2fefbcbfc3219a0375de4c70
SHA1

b01901f559729f40b76dfbd108adc0cce7f78b68
SHA256

62f5f1c4e8c969de22bc1cd8fefbbbb7be2fed72e9a3421dc8ecffc52c9a5f97
SHA512

f7b4191c7b596abf82a717ae0a9546152761ba46f702ea4a5b7eeb76faeee4fa1c6ddf88156c5bbad6e68c7122076611996cf3c139568f931b9858941de0e039
SSDEEP

12288:yprH/tm7Fs8neme1GLiVQZXOxpNMzKP2Lq:S8bnLZXONMy2L

Score

N/A

Malware Config

Signatures

Files

62f5f1c4e8c969de22bc1cd8fefbbbb7be2fed72e9a3421dc8ecffc52c9a5f97
.dll windows x86

c2844bfe98057e8fb03b6fb90da10594

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowThreadProcessId
MessageBoxA
WindowFromDC
GetParent
UnhookWindowsHookEx
ClientToScreen
GetDesktopWindow
GetWindowRect
EndPaint
GetSystemMetrics
DestroyWindow
FillRect
ReleaseDC
wsprintfA
GetClientRect
GetDC

kernel32

SetThreadPriority
EnterCriticalSection
GetCurrentThread
GetVersionExA
TlsFree
FreeLibrary
GetLastError
GlobalAlloc
SetLastError
WriteFile
VirtualAlloc
LoadLibraryA
LeaveCriticalSection
TlsGetValue
GetWriteWatch
InitializeCriticalSection
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
TlsSetValue
VirtualFree
GetStartupInfoA
CreateFileA
GetTempPathA
TlsAlloc
Sleep
GetDateFormatA
GetModuleFileNameA
GlobalSize
GetTickCount
GlobalFree
DeleteCriticalSection

msvcrt

fseek
sprintf
realloc
abort
_iob
strcmp
exit
ungetc
strstr
_stricmp
_CIpow
fwrite
memcpy
strtok
atoi
fread
_assert
fopen
getenv
free
malloc
memmove
memcmp
calloc
atol
bsearch
fprintf
rand
strncmp
atof
printf
fclose
sqrt
ftell
fgets
memset
_ftol
strcpy
sscanf

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

AsVoidPtr
EvalFrame
FromReadWriteMemory
Long_AsLong
Number_Long
get_oFFs
get_pHYs
get_x_pixels_per_meter
set_background

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2844bfe98057e8fb03b6fb90da10594

Headers

File Characteristics

Imports

user32

kernel32

msvcrt

advapi32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 72KB - Virtual size: 69KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 204KB - Virtual size: 202KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 72KB - Virtual size: 69KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 204KB - Virtual size: 202KB

.reloc
Size: 8KB - Virtual size: 7KB