16af43c49206ef71949aafde54de520d2bb3b3d97f15162002737fbfa71fc74b

General

Target

16af43c49206ef71949aafde54de520d2bb3b3d97f15162002737fbfa71fc74b
Size

304KB
MD5

20fb9288938c082665062ecf75aefec0
SHA1

934dc9bb2268f06ecce7c5c8a6c2ce781145bd13
SHA256

16af43c49206ef71949aafde54de520d2bb3b3d97f15162002737fbfa71fc74b
SHA512

c2f73a13a3c6e24878e18dbf2de811f0d08bf0353bc04b1416a253cb1fbccea980ecef4be1f5ed846fbfc05520b87311993f18249796abb785302143897037a6
SSDEEP

6144:SflWkBwCuPIUVAWkmTYHDqJOLkoGT7+50JA6udqnYTSJ:SAkqC4kK0UOLkTTi5vsYT

Score

N/A

Malware Config

Signatures

Files

16af43c49206ef71949aafde54de520d2bb3b3d97f15162002737fbfa71fc74b
.dll windows x86

e306d0a39cc42dffdd19e24eff427261

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

msvcrt

getenv
_ftol
strcpy
atol
strtok
_assert
ftell
rand
abort
_iob
strstr
fseek
fgets
fwrite
atoi
exit
printf
memset
fread
_stricmp
free
sqrt
sscanf
memcpy
strncmp
realloc
bsearch
calloc
_CIpow
strcmp
fclose
malloc
sprintf
fopen
fprintf
memmove

user32

ReleaseDC
GetWindowThreadProcessId
WINNLSGetEnableStatus
WindowFromDC
wsprintfA
GetClientRect
GetWindowRect
MessageBoxA
GetParent
GetDC
PrintWindow
UnhookWindowsHookEx

kernel32

TlsAlloc
GetStartupInfoA
FlushConsoleInputBuffer
GetCurrentThread
CreateFileA
GlobalSize
VirtualFree
TlsSetValue
InitializeCriticalSection
GetCurrentThreadId
LeaveCriticalSection
GetModuleHandleA
GetDateFormatA
SetLastError
TlsGetValue
GetModuleFileNameA
EnterCriticalSection
Sleep
FreeLibrary
TlsFree
GlobalFree
LoadLibraryA
SetThreadPriority
GetLastError
DeleteCriticalSection
GetVersionExA
GlobalAlloc
VirtualAlloc
GetTickCount
QueryPerformanceCounter
IsBadReadPtr
GetProcAddress

Exports

Exports

GetAttr
GetItem
Node_Free
RichGetCompare
_In
_ascii_strtod
set_sRGB

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e306d0a39cc42dffdd19e24eff427261

Headers

File Characteristics

Imports

advapi32

msvcrt

user32

kernel32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 76KB - Virtual size: 73KB

.data Size: 44KB - Virtual size: 44KB

.rsrc Size: 80KB - Virtual size: 79KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 76KB - Virtual size: 73KB

.data
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 80KB - Virtual size: 79KB

.reloc
Size: 8KB - Virtual size: 6KB