0ffb4d6db3608c5f09d6a748f685be6711c869fab2bb8165700412fc1132fe74

General

Target

0ffb4d6db3608c5f09d6a748f685be6711c869fab2bb8165700412fc1132fe74
Size

752KB
MD5

f4e171fdc19e51ef646775850fd7e3d0
SHA1

b46ea212f232591becd5841153c8c01f2d1bca0f
SHA256

0ffb4d6db3608c5f09d6a748f685be6711c869fab2bb8165700412fc1132fe74
SHA512

7988e625578f3734742416de325a7fd5a5a4386ab9b1dd83950e06833688baa0fd2c76471b07db0d25a505082f21ebc36830e8121d4a99ab2ad671d19ab8e55d
SSDEEP

12288:9iT/nrW/jbVDl+27Gd0ECFok/kiChRPItyiFHXRaV64y+4Rxg:9C6/fZl+27VECuk/aKkiFHXRd4/

Score

N/A

Malware Config

Signatures

Files

0ffb4d6db3608c5f09d6a748f685be6711c869fab2bb8165700412fc1132fe74
.dll windows x86

d14058d98d2572bf4feb87898097012b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
GetParent
MessageBoxA
ReleaseDC
GetDC
wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

msvcrt

_CIpow
atol
ftell
strcpy
memmove
sprintf
fopen
fclose
_ftol
strcmp
strncmp
_stricmp
strtok
strstr
sscanf
memset
malloc
fwrite
fgets
fprintf
fread
_iob
getenv
rand
exit
_assert
fseek
memcpy
free
realloc
abort

kernel32

IsBadReadPtr
VirtualFree
EnterCriticalSection
GlobalAlloc
SetThreadPriority
GetStartupInfoA
TlsAlloc
GetModuleHandleA
VirtualAlloc
QueryPerformanceCounter
GetProcAddress
TlsGetValue
LeaveCriticalSection
GetModuleFileNameA
GetCurrentThreadId
Sleep
GlobalFree
GlobalSize
SetLastError
InitializeCriticalSection
DeleteCriticalSection
GetTickCount
CreateFileA
LoadLibraryA
TlsSetValue
GetDateFormatA
FreeLibrary
GetLastError
TlsFree

Exports

Exports

GetMin
Register
SyntaxError
TabError
_mystricmp
get_rgb_to_gray_status

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d14058d98d2572bf4feb87898097012b

Headers

File Characteristics

Imports

user32

advapi32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 187KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 256KB - Virtual size: 256KB

.rsrc Size: 216KB - Virtual size: 214KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 188KB - Virtual size: 187KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 256KB - Virtual size: 256KB

.rsrc
Size: 216KB - Virtual size: 214KB

.reloc
Size: 8KB - Virtual size: 7KB