57e31e70efcdf73114f2524ee95ce4edfbac545733781ee35b78e359c1b087f7

General

Target

57e31e70efcdf73114f2524ee95ce4edfbac545733781ee35b78e359c1b087f7
Size

580KB
MD5

3ccd95dfb2c0336dc40f8eede07f1160
SHA1

3b907fe9e08fad691dbb8a850be76a2783c8cb0c
SHA256

57e31e70efcdf73114f2524ee95ce4edfbac545733781ee35b78e359c1b087f7
SHA512

6ccb4f11f20a77cdcc12a690e1c949858a8cfbfaf2e22d05007e978c62edc41a16fcba6baa44a5cefb4fc87ad239fe2d3fbda5ccde7787b50eb5abcf20f15da2
SSDEEP

12288:GffORbq1R7FT3nwSYh2gbaAZOf+DCL5tf6nltYC8:EGt+7FxNIMf+2L5tfO6

Score

N/A

Malware Config

Signatures

Files

57e31e70efcdf73114f2524ee95ce4edfbac545733781ee35b78e359c1b087f7
.dll windows x86

70c6f67d38ebec14ce082e59bc9312ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

FreeLibrary
GetModuleHandleA
InitializeCriticalSection
GetCurrentThread
LeaveCriticalSection
GetVersionExA
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
CreateFileA
SetThreadPriority
MapUserPhysicalPagesScatter
GetDateFormatA
VirtualAlloc
GlobalFree
TlsFree
VirtualFree
GetProcAddress
Sleep
GetModuleFileNameA
GetStartupInfoA
LoadLibraryA
TlsGetValue
GlobalSize
EnterCriticalSection
GlobalAlloc
DeleteCriticalSection
WriteFile
GetTempPathA
GetLastError
GetTickCount

msvcrt

ungetc
memcmp
bsearch
getenv
realloc
free
strstr
calloc
strcmp
rand
ftell
_assert
atoi
fprintf
_stricmp
strncmp
malloc
abort
_CIpow
exit
atof
fread
memcpy
fwrite
memmove
sqrt
_iob
memset
printf
sscanf
sprintf
fclose
fseek
strtok
fgets
strcpy
_ftol
atol
fopen

user32

GetWindowRect
UnhookWindowsHookEx
GetClientRect
ReleaseDC
DestroyWindow
GetWindowThreadProcessId
wsprintfA
GetParent
FlashWindow
FillRect
ClientToScreen
GetDesktopWindow
MessageBoxA
CopyRect
WindowFromDC
GetDC

Exports

Exports

FutureWarning
Number_TrueDivide
ParseString
SelfIter
_vsnprintf
get_y_offset_microns
set_sBIT
start_read_image

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70c6f67d38ebec14ce082e59bc9312ba

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 167KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 208KB - Virtual size: 207KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 168KB - Virtual size: 167KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 208KB - Virtual size: 207KB

.reloc
Size: 8KB - Virtual size: 6KB