0bf8fc962a5672543b840896a7bc49b422ad2c9fcc28e16321e984415c04ae78

General

Target

0bf8fc962a5672543b840896a7bc49b422ad2c9fcc28e16321e984415c04ae78
Size

328KB
MD5

fb0026233366ceaee617f9b8f3c693f0
SHA1

25f28296aa4105ebf435e5df9a2703881ff7d064
SHA256

0bf8fc962a5672543b840896a7bc49b422ad2c9fcc28e16321e984415c04ae78
SHA512

8636cf6f0b6bdb61e0067cbb15d01ffaf4eaf762157b593c3ce4a9c657f12c97485b041abfda8b231492240c592ba032fe3850a348bb568bdef4e201ad489534
SSDEEP

6144:sIJdxiXe+oW2P/XTfZgpflA6R2KrkgWmm:H6u+oW2P/XDql2rKrkDmm

Score

N/A

Malware Config

Signatures

Files

0bf8fc962a5672543b840896a7bc49b422ad2c9fcc28e16321e984415c04ae78
.dll windows x86

5ea2cc7d423d4d29ad3fd9d0196586a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

msvcrt

strcmp
abort
bsearch
strncmp
_ftol
fseek
fwrite
fgets
atol
memcpy
_iob
sqrt
ftell
rand
strstr
fread
fclose
calloc
_stricmp
strcpy
getenv
strtok
memset
malloc
memmove
fopen
_assert
free
sprintf
_CIpow
atoi
fprintf
printf
realloc
exit
sscanf

user32

MessageBoxA
UnhookWindowsHookEx
PrintWindow
GetClientRect
wsprintfA
GetParent
GetWindowThreadProcessId
WindowFromDC
GetDC

kernel32

LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
LoadLibraryA
GetModuleHandleA
SetThreadPriority
VirtualFree
VirtualAlloc
CreateFileA
GetProcAddress
GlobalFree
GetStartupInfoA
SetLastError
DeleteCriticalSection
QueryPerformanceCounter
GetDateFormatA
FlushConsoleInputBuffer
GetModuleFileNameA
GetTickCount
GlobalAlloc
TlsGetValue
Sleep
GetLastError
EnterCriticalSection
IsBadReadPtr
GlobalSize
TlsAlloc
FreeLibrary
TlsSetValue
TlsFree
GetVersionExA
GetCurrentThread

Exports

Exports

ImportModuleLevel
Node_Free
Number_FloorDivide
UnicodeTranslateError
_New
get_interlace_type
vGetFileW
warning

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ea2cc7d423d4d29ad3fd9d0196586a1

Headers

File Characteristics

Imports

advapi32

msvcrt

user32

kernel32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 114KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 44KB - Virtual size: 44KB

.rsrc Size: 76KB - Virtual size: 74KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 116KB - Virtual size: 114KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 76KB - Virtual size: 74KB

.reloc
Size: 8KB - Virtual size: 7KB