5b753a4205b76bb598e7ea8bb8599c9a463949dc3c375083520e943a46226cee

General

Target

5b753a4205b76bb598e7ea8bb8599c9a463949dc3c375083520e943a46226cee
Size

332KB
MD5

3abd0d09ec489a3a7b2e12e5f816a0e0
SHA1

a5969de5323c6e3c7028ae8274b72dbbe18d173e
SHA256

5b753a4205b76bb598e7ea8bb8599c9a463949dc3c375083520e943a46226cee
SHA512

ce3ab23284b55662cb94d74bdc457c7827019cc894a612f2562a9989c657355e5125d936dacc34ce6ea69d0012a7baff202b1fc3cd7dc7be555e1f7ae6130d83
SSDEEP

6144:tu6ck22yd0hFTzWiO7V+UPNMm3djfedV9Tg6UgsxWqaZPxCFe:tkk22K0hRCiO71X3dzmvsgdqiPxC

Score

N/A

Malware Config

Signatures

Files

5b753a4205b76bb598e7ea8bb8599c9a463949dc3c375083520e943a46226cee
.dll windows x86

064680cea4ea0a0044833894f07e1cd1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ReleaseDC
DestroyWindow
ClientToScreen
FillRect
GetParent
WindowFromDC
GetClientRect
GetDesktopWindow
GetWindowThreadProcessId
MessageBoxA
UnhookWindowsHookEx
wsprintfA
GetWindowRect
GetDC

msvcrt

fgets
rand
malloc
_filbuf
_assert
strcpy
memcpy
_ftol
_iob
abort
_CIpow
fprintf
ftell
sscanf
fseek
memmove
atoi
strncmp
free
fclose
fread
exit
fopen
fwrite
_stricmp
ungetc
strstr
bsearch
strcmp
sqrt
realloc
atol
memcmp
sprintf
atof
getenv
calloc
printf
memset
strtok

kernel32

GlobalSize
GetVersionExA
GetTickCount
GlobalAlloc
LoadLibraryA
Sleep
DeleteCriticalSection
GetStartupInfoA
GetModuleHandleA
GetTempPathA
SetThreadPriority
FreeLibrary
GlobalFree
VirtualAlloc
TlsFree
GetCurrentThreadId
EnterCriticalSection
GetProcAddress
GetLastError
SetLastError
GetCurrentThread
CreateFileA
GetModuleFileNameA
InitializeCriticalSection
TlsGetValue
WriteFile
LeaveCriticalSection
GetDateFormatA
TlsSetValue
VirtualFree
TlsAlloc

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

Exports

Exports

FromLong
FromVoidPtrAndDesc
Parse
SetDefaults
get_pHYs
method
set_crc_action
strategy

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

064680cea4ea0a0044833894f07e1cd1

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

advapi32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 114KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 40KB - Virtual size: 40KB

.rsrc Size: 76KB - Virtual size: 75KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 116KB - Virtual size: 114KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 76KB - Virtual size: 75KB

.reloc
Size: 12KB - Virtual size: 8KB