26ea9291d0939632e59bf5ba5e4cafda4b048f04537123108fc447527dd51988

Sharing

Copy URL Twitter E-mail

General

Target

26ea9291d0939632e59bf5ba5e4cafda4b048f04537123108fc447527dd51988
Size

133KB
MD5

06e7f8f1e36a9c97f9474f619ec320e7
SHA1

c3679e93c2d9713516a2fdf364b0a6188a78a2b7
SHA256

26ea9291d0939632e59bf5ba5e4cafda4b048f04537123108fc447527dd51988
SHA512

14eabc8cfecf4e6a5f11a19e4db18a83729351b7d36b6c0d27319bfbb063fda72a8e85fd3d249e04cd4f3e305c336d1e428f779a3a7aab96a3a498fdb5d88367
SSDEEP

3072:okCl1sKv4gq7hKvOTgWlIQK4oHSzAIdMgEMLsfxM2CPI4+IfMFjSVb/:xCvag+EWT92OAId2MLsJcA4bM8N/

Score

N/A

Malware Config

Signatures

Files

26ea9291d0939632e59bf5ba5e4cafda4b048f04537123108fc447527dd51988
.zip
Audioconverter_Studio_6_key_generator_by_orion.exe
.exe windows x86

fc6a07926d2c2c4219a52d9fa8ebcc25

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

wcsncmp
strcpy
_vsnprintf

shlwapi

PathCanonicalizeA
StrFormatByteSizeW
PathStripToRootA
StrFormatKBSizeW

shell32

ord750

kernel32

SetVolumeLabelA
SetupComm
TlsGetValue
GetProfileIntW
SetCommBreak
SetFileTime
SetHandleCount
FatalAppExitW
FileTimeToDosDateTime
CancelIo
QueueUserWorkItem
CancelTimerQueueTimer
RequestDeviceWakeup
OpenEventW
lstrcpyA
GetDiskFreeSpaceExW
SetProcessWorkingSetSize
lstrlenW
LoadLibraryW
OpenFileMappingW
lstrcmpiA
ConnectNamedPipe
SetMailslotInfo
CreateEventW

user32

GetRawInputData
LoadMenuIndirectA
RealGetWindowClassW
DestroyAcceleratorTable
InvertRect
EnumPropsW
GetWindow
LookupIconIdFromDirectory
GetDlgItemTextA
DlgDirListW
GetSystemMetrics
ReleaseCapture
DeregisterShellHookWindow
TileWindows
IntersectRect
LockWindowUpdate
GetDC
DialogBoxIndirectParamW
LoadImageW
VkKeyScanExW
SetCursor
IsCharUpperA
TabbedTextOutW
GetClientRect
CreateAcceleratorTableW
ExitWindowsEx
TranslateMessage
PeekMessageW
GetListBoxInfo
GetMenuContextHelpId
ShowScrollBar
PostThreadMessageW
MessageBoxW
MapWindowPoints
ExcludeUpdateRgn
DispatchMessageW
GetClassNameA
DrawTextExA
EnumPropsA

gdi32

ResetDCW
SetMapMode
SetAbortProc
DeleteEnhMetaFile
GetBrushOrgEx
ScaleWindowExtEx
CreateBitmapIndirect
GetTextExtentPointI
GetTextExtentPointW
GetMetaRgn
GetOutlineTextMetricsA
SetMetaFileBitsEx
AnimatePalette
GetBitmapBits
TextOutW

advapi32

AddAce
CopySid
AddAuditAccessAceEx
IsValidAcl

Exports

Exports

__GetScrollRange@12

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bmem
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedat
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FILE_ID.DIZ
orion.nfo

Sharing

General

Malware Config

Signatures

Files

fc6a07926d2c2c4219a52d9fa8ebcc25

Headers

File Characteristics

Imports

ntdll

shlwapi

shell32

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.extext Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 364B

.bmem Size: 4KB - Virtual size: 3KB

.sedat Size: 512B - Virtual size: 484B

.rsrc Size: 125KB - Virtual size: 124KB

.reloc Size: 1024B - Virtual size: 880B

.text
Size: 11KB - Virtual size: 10KB

.extext
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 364B

.bmem
Size: 4KB - Virtual size: 3KB

.sedat
Size: 512B - Virtual size: 484B

.rsrc
Size: 125KB - Virtual size: 124KB

.reloc
Size: 1024B - Virtual size: 880B