e91c597a7ca1b79a3161edd4bf67b7eda351608ec040855730dbef9d99cf6bd7

General

Target

e91c597a7ca1b79a3161edd4bf67b7eda351608ec040855730dbef9d99cf6bd7
Size

320KB
MD5

ae7e67c9dcac7289f2b5c6341456d237
SHA1

066f38bae7d530eeee71fa1d3cca5441338160a3
SHA256

e91c597a7ca1b79a3161edd4bf67b7eda351608ec040855730dbef9d99cf6bd7
SHA512

03812afc4f16675c61404edb0d9d850c0c58129943813d5e181480f7fcdc9ff2b2a14bbd93e936e199c6931e9ed8f5ab08eb59a0be259b9be08c12017c9d4ca8
SSDEEP

6144:Af8ksbPJ12YTxPOlTCkPmYQITfdvopftZNbTfLmFap0u5:Af8kex1TTxPGfPflIftDXfL10u5

Score

N/A

Malware Config

Signatures

Files

e91c597a7ca1b79a3161edd4bf67b7eda351608ec040855730dbef9d99cf6bd7
.dll windows x86

e855ae35aa7fb778096ec3a4af740553

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetStringTypeW
GetStringTypeA
HeapFree
HeapAlloc
GetModuleFileNameA
GetCommandLineA
GetVersion
HeapReAlloc
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
GetProcAddress
LoadLibraryA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW

user32

UnionRect
IsRectEmpty
SetRect
PtInRect

magcore

Mag0Inter

Exports

Exports

fnHTFaceClean
fnHTFaceDetect

Sections

.text
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e855ae35aa7fb778096ec3a4af740553

Headers

File Characteristics

Imports

kernel32

user32

magcore

Exports

Exports

Sections

.text Size: 180KB - Virtual size: 178KB

.rdata Size: 108KB - Virtual size: 106KB

.data Size: 16KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 960B

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 180KB - Virtual size: 178KB

.rdata
Size: 108KB - Virtual size: 106KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 960B

.reloc
Size: 8KB - Virtual size: 4KB