c612b8130ae44e96564337d64443f7cbcb2701cd9359396cc1bfa0ef097f5d52

Sharing

Copy URL Twitter E-mail

General

Target

c612b8130ae44e96564337d64443f7cbcb2701cd9359396cc1bfa0ef097f5d52
Size

528KB
MD5

b72dde6f6dd0b48c9e7123e21990ac20
SHA1

d0443a80f84b5eede4ecc46a32223eb1585e8f47
SHA256

c612b8130ae44e96564337d64443f7cbcb2701cd9359396cc1bfa0ef097f5d52
SHA512

3b1b64ec2cd309d03b44c38e7430c995a213a69cec5bebded4c33dd198e8928347594ab3b7b2b79a6f4f2b04effe59830b126fc2658ad96adbae7ae229f17339
SSDEEP

6144:WFvBTf7SZDUYoXFw/pkwlhvO8P7KLKkQeeaQee6QeesQeea9QeehQeeq3W196s0o:OvBXEDUYoVKpkwGuU0+mhGwuK0

Score

N/A

Malware Config

Signatures

Files

c612b8130ae44e96564337d64443f7cbcb2701cd9359396cc1bfa0ef097f5d52
.dll windows x86

7486abf54ea44e512aef0e0a836b02b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
CloseHandle
MultiByteToWideChar
VirtualFree
VirtualAlloc
GetSystemInfo
IsProcessorFeaturePresent
EnterCriticalSection
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
HeapAlloc
GetProcessHeap
HeapFree
InterlockedDecrement
InterlockedIncrement
SetLastError
FlushInstructionCache
GetCommandLineA
GetVersion
RtlUnwind
ExitProcess
TerminateProcess
RaiseException
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
IsBadWritePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
LCMapStringA
LCMapStringW
ReadFile
SetFilePointer
GetCurrentProcessId
FlushFileBuffers
SetUnhandledExceptionFilter
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEndOfFile
GetLocaleInfoW
CreateFileA
GetLastError
WriteFile
OutputDebugStringA
GetProcAddress
LoadLibraryA
GetVersionExA
CreateThread
Sleep
GetModuleHandleA
GetCurrentProcess
WriteProcessMemory
HeapReAlloc
VirtualProtect

user32

GetCursorPos
RegisterClassExA
GetDesktopWindow
CreateWindowExA
DestroyWindow
DefWindowProcA
GetAsyncKeyState

d3d9

Direct3DCreate9

gdi32

GetTextMetricsW
SetTextColor
GetFontLanguageInfo
CreateFontIndirectA
SetBkColor
SetBkMode
ExtTextOutW
MoveToEx
ExtTextOutA
CreateCompatibleDC
SetMapMode
SetTextAlign
GetCharacterPlacementW
GetCharacterPlacementA
SelectObject
DeleteDC
CreateDIBSection
GetGlyphOutlineA
GetTextMetricsA
GetObjectW
GetObjectA
DeleteObject
CreateFontIndirectW

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 356KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7486abf54ea44e512aef0e0a836b02b7

Headers

File Characteristics

Imports

kernel32

user32

d3d9

gdi32

advapi32

Sections

.text Size: 356KB - Virtual size: 353KB

.rdata Size: 84KB - Virtual size: 80KB

.data Size: 52KB - Virtual size: 64KB

.sxdata Size: 4KB - Virtual size: 8B

.reloc Size: 28KB - Virtual size: 27KB

.text
Size: 356KB - Virtual size: 353KB

.rdata
Size: 84KB - Virtual size: 80KB

.data
Size: 52KB - Virtual size: 64KB

.sxdata
Size: 4KB - Virtual size: 8B

.reloc
Size: 28KB - Virtual size: 27KB