345e17395833afbaad2c8a402acfef754b26e373ca67ccf91e5da6fd6a6adf31

General

Target

345e17395833afbaad2c8a402acfef754b26e373ca67ccf91e5da6fd6a6adf31
Size

352KB
MD5

db973dd0bb3e73a539ca2ec525d1b360
SHA1

2e53e55c42ffab2395b50d72661fad1d137a5df5
SHA256

345e17395833afbaad2c8a402acfef754b26e373ca67ccf91e5da6fd6a6adf31
SHA512

742b80a7e4259ad44228049f84cfae64834661752aa33836f1ffc536b1c0a7bfdc6651e2467644e668b6555c59ef820595baa1b7d4510c625d14172169aadd4b
SSDEEP

6144:A0nti3bWQXdMOT3MEqr50+od7eUsH0xO5J7rNWXF2RK/M//:1t3QtJ3/WodqP8W

Score

N/A

Malware Config

Signatures

Files

345e17395833afbaad2c8a402acfef754b26e373ca67ccf91e5da6fd6a6adf31
.dll windows x86

2bb16867755aba7f8916f04cc3a78d0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetLastError
GetModuleFileNameA
EnterCriticalSection
GetProcAddress
CreateFileA
IsBadReadPtr
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
InitializeCriticalSection
GlobalSize
DeleteCriticalSection
TlsAlloc
GetTickCount
TlsGetValue
SetThreadPriority
TlsSetValue
GlobalAlloc
GlobalFree
GetDateFormatA
GetCurrentThreadId
QueryPerformanceCounter
TlsFree
Sleep
FreeLibrary
LeaveCriticalSection
VirtualFree
SetLastError

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

msvcrt

realloc
strcpy
fgets
free
abort
ftell
fwrite
fopen
rand
memcpy
calloc
_stricmp
getenv
_CIpow
sscanf
malloc
memset
strstr
strtok
_assert
fclose
sprintf
strncmp
atoi
fprintf
fread
strcmp
fseek
atol
exit
_iob
_ftol
memmove

user32

ReleaseDC
wsprintfA
GetWindowThreadProcessId
GetWindowRect
GetParent
GetDC
MessageBoxA

Exports

Exports

GetMin
Register
SyntaxError
TabError
_mystricmp
get_rgb_to_gray_status

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2bb16867755aba7f8916f04cc3a78d0c

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

user32

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 92KB - Virtual size: 92KB

.rsrc Size: 80KB - Virtual size: 78KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 92KB - Virtual size: 92KB

.rsrc
Size: 80KB - Virtual size: 78KB

.reloc
Size: 8KB - Virtual size: 7KB