24b5e2b9b2210a67108a328d976b677faac7737f7272892b90fa5dcae2895d25

General

Target

24b5e2b9b2210a67108a328d976b677faac7737f7272892b90fa5dcae2895d25
Size

380KB
MD5

17b2697c7af4114969b4b8e88149bf30
SHA1

d45ab877228c338a72f0c566a950ccbfebb03c8f
SHA256

24b5e2b9b2210a67108a328d976b677faac7737f7272892b90fa5dcae2895d25
SHA512

cd287f0c9456f3e164ffb1ebf392e1fbbc3304aab647a861497fd3e35b5357397aa2c97b2659ed0860f66f9f1aa184ca2e12ec40e8ab294296349138003453f4
SSDEEP

6144:5r/8gCrZZIlyOSJMor+Pdyl4DDL/2snCSW64bLUKb:57gelyOSJMY6qsf4vU

Score

N/A

Malware Config

Signatures

Files

24b5e2b9b2210a67108a328d976b677faac7737f7272892b90fa5dcae2895d25
.dll windows x86

3272091d5253738ce2b0ab20472c7225

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

msvcrt

strcpy
fwrite
_assert
fprintf
fread
_iob
malloc
_ftol
fseek
strcmp
strtok
atol
strstr
sprintf
realloc
exit
memset
_CIpow
rand
abort
_stricmp
fopen
ftell
getenv
calloc
atoi
memcpy
memmove
strncmp
fgets
sscanf
free
fclose

kernel32

VirtualAlloc
EnterCriticalSection
GetModuleFileNameA
GlobalSize
GlobalFree
QueryPerformanceCounter
GetCurrentThreadId
VirtualFree
GetProcAddress
SetThreadPriority
GetLastError
GetDateFormatA
IsBadReadPtr
GetModuleHandleA
LeaveCriticalSection
DeleteCriticalSection
TlsGetValue
GlobalAlloc
TlsSetValue
InitializeCriticalSection
LoadLibraryA
TlsFree
FreeLibrary
SetLastError
CreateFileA
TlsAlloc
GetTickCount
GetStartupInfoA
Sleep

user32

GetDC
ReleaseDC
wsprintfA
MessageBoxA
GetWindowRect
GetParent
GetWindowThreadProcessId

Exports

Exports

Number_Multiply
ReleaseLock
StrictErrors
get_color_type
write_chunk_data

Sections

.text
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3272091d5253738ce2b0ab20472c7225

Headers

File Characteristics

Imports

advapi32

msvcrt

kernel32

user32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 109KB

.rdata Size: 84KB - Virtual size: 80KB

.data Size: 92KB - Virtual size: 92KB

.rsrc Size: 80KB - Virtual size: 78KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 112KB - Virtual size: 109KB

.rdata
Size: 84KB - Virtual size: 80KB

.data
Size: 92KB - Virtual size: 92KB

.rsrc
Size: 80KB - Virtual size: 78KB

.reloc
Size: 8KB - Virtual size: 7KB