04df61da71f6de59c221c34cc0cf81ee962df733d013c0d3794981a1b2d4604c

General

Target

04df61da71f6de59c221c34cc0cf81ee962df733d013c0d3794981a1b2d4604c
Size

744KB
MD5

4fbf4e9c0cc4440fd9522614d7279640
SHA1

8907d072a6b851cd56da8e11942fe8a4a2b46396
SHA256

04df61da71f6de59c221c34cc0cf81ee962df733d013c0d3794981a1b2d4604c
SHA512

b6ce963c5f04926443833dc123c1ff3e278996d99d38d45f8907340a936928a32248b3b189fd2a733c7f9d20a6dacbece8929732e87ebf6cb268d631b9c32a45
SSDEEP

12288:IOsGwt68WIr1W+C85oE4gSn5doRtbKhHeWvOGtBIsH:N7dXIr1W+NoEmjoLG+Wv

Score

N/A

Malware Config

Signatures

Files

04df61da71f6de59c221c34cc0cf81ee962df733d013c0d3794981a1b2d4604c
.dll windows x86

787767b52bcb0693dbf99c08697f7de4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
ReleaseDC
GetParent
GetWindowRect
wsprintfA
GetWindowThreadProcessId
MessageBoxA
WindowFromDC

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

strcpy
calloc
sprintf
memmove
strtok
fread
abort
fopen
memset
strstr
exit
fprintf
free
fclose
fgets
memcpy
malloc
realloc
atol
_iob
sscanf
rand
ftell
getenv
bsearch
_stricmp
strncmp
_CIpow
_assert
_ftol
fwrite
strcmp
atoi
fseek

kernel32

EnterCriticalSection
IsBadReadPtr
LeaveCriticalSection
GlobalAlloc
DeleteCriticalSection
VirtualFree
TlsFree
VirtualAlloc
Sleep
GlobalFree
CreateFileA
TlsGetValue
GetModuleHandleA
GetTickCount
GetCurrentThreadId
InitializeCriticalSection
FreeLibrary
GlobalSize
GetProcAddress
GetStartupInfoA
SetLastError
QueryPerformanceCounter
SetThreadPriority
GetDateFormatA
LoadLibraryA
GetModuleFileNameA
GetLastError
TlsSetValue
TlsAlloc

Exports

Exports

Decode
FromDouble
Int_AsSsize_t
List_AsTuple
_InPlaceConcat
_getsig
get_pHYs
write_png

Sections

.text
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

787767b52bcb0693dbf99c08697f7de4

Headers

File Characteristics

Imports

user32

advapi32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 174KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 256KB - Virtual size: 256KB

.rsrc Size: 212KB - Virtual size: 210KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 176KB - Virtual size: 174KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 256KB - Virtual size: 256KB

.rsrc
Size: 212KB - Virtual size: 210KB

.reloc
Size: 8KB - Virtual size: 7KB