11f98ca07b49414d60cecf4edb6e95f51c1f6a12fe1957c8af972ab4411c493e

General

Target

11f98ca07b49414d60cecf4edb6e95f51c1f6a12fe1957c8af972ab4411c493e
Size

348KB
MD5

3ff556bfa99b54045bd4cf4447222090
SHA1

ea3232a0f84ef129c862757e8db0f36f76768588
SHA256

11f98ca07b49414d60cecf4edb6e95f51c1f6a12fe1957c8af972ab4411c493e
SHA512

cba592e7634fb7951fc9e31b49a14a5fc8c468b623a2aedbd61a6a338b0a6df683819354c29ce6f354cc6967a0bfbcf57102782c297e4cc41479b0752ebc70ce
SSDEEP

6144:xpuWZVdmrKytZnOhYIzmbhMnO/64Oc0Lk/gKtJok7mrrW:LuWZV9yfdbtOcX/Yi0

Score

N/A

Malware Config

Signatures

Files

11f98ca07b49414d60cecf4edb6e95f51c1f6a12fe1957c8af972ab4411c493e
.dll windows x86

6c7d6204ad24f9c63739428aa9ee776c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcpy
atol
_CIpow
_assert
memcpy
_ftol
getenv
exit
memset
strncmp
fgets
free
fread
fopen
sprintf
fwrite
sscanf
malloc
calloc
realloc
memmove
strtok
fprintf
ftell
abort
strcmp
fclose
_stricmp
strstr
_iob
rand
fseek

user32

GetDC
GetWindowThreadProcessId
ReleaseDC
GetWindowRect
MessageBoxA
wsprintfA
GetParent

kernel32

EnterCriticalSection
GetStartupInfoA
SetLastError
TlsAlloc
GlobalSize
CreateFileA
QueryPerformanceCounter
GetCurrentThreadId
Sleep
TlsGetValue
FreeLibrary
GetProcAddress
GetDateFormatA
VirtualAlloc
GetTickCount
LoadLibraryA
DeleteCriticalSection
GetLastError
VirtualFree
TlsFree
GlobalAlloc
SetThreadPriority
GetModuleHandleA
InitializeCriticalSection
IsBadReadPtr
LeaveCriticalSection
TlsSetValue
GetModuleFileNameA
GlobalFree

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

GetMin
Register
SyntaxError
TabError
_mystricmp
get_rgb_to_gray_status

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c7d6204ad24f9c63739428aa9ee776c

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 76KB - Virtual size: 74KB

.data Size: 92KB - Virtual size: 92KB

.rsrc Size: 76KB - Virtual size: 75KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 76KB - Virtual size: 74KB

.data
Size: 92KB - Virtual size: 92KB

.rsrc
Size: 76KB - Virtual size: 75KB

.reloc
Size: 8KB - Virtual size: 6KB