28f67acb697aa134fdf9fe31dc2d837fe7a07e9b46b8ae067670897b1c6a53df

Sharing

Copy URL Twitter E-mail

General

Target

28f67acb697aa134fdf9fe31dc2d837fe7a07e9b46b8ae067670897b1c6a53df
Size

848KB
MD5

79c6b98358f734973c6e124fce5bf07e
SHA1

1710d976f40838d6963227a048552873f9d1d465
SHA256

28f67acb697aa134fdf9fe31dc2d837fe7a07e9b46b8ae067670897b1c6a53df
SHA512

90b9570f310d49d54e1bdeeaee9d1e3c949ff6b6fb49b5d8a9caa69bd1face5bf737418c191a9a991ce2ccae5ac00129135063e13d95f4963cade4201cb76553
SSDEEP

12288:RAU4K/MVGLqKyp/NJNKjLTMtbKb/a2We3X884n3pzoJAV7M:RAU4K0VGqv/NJmLKw/7M843FoJv

Score

N/A

Malware Config

Signatures

Files

28f67acb697aa134fdf9fe31dc2d837fe7a07e9b46b8ae067670897b1c6a53df
.exe windows x86

0501ba77bceafe83358bade6f6fceb1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutClose
waveOutPrepareHeader
waveOutWrite
waveOutGetNumDevs
waveOutOpen
waveOutReset
waveOutUnprepareHeader

kernel32

RtlUnwind
SetEndOfFile
HeapSize
GetLocaleInfoA
LocalFree
FormatMessageA
GetLastError
FindClose
FindNextFileA
FindFirstFileA
LeaveCriticalSection
EnterCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
SetPriorityClass
GetCurrentProcess
InitializeCriticalSection
GlobalLock
GlobalAlloc
Sleep
DeleteCriticalSection
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
ExitProcess
HeapReAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
GetModuleFileNameA
RaiseException
SetHandleCount
GetFileType
GetStartupInfoA
SetStdHandle
CloseHandle
SetFilePointer
MultiByteToWideChar
ReadFile
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp1
Size: 536KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0501ba77bceafe83358bade6f6fceb1b

Headers

File Characteristics

Imports

winmm

kernel32

Sections

.text Size: 184KB - Virtual size: 182KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 68KB - Virtual size: 72KB

.rsrc Size: 4KB - Virtual size: 176B

.vmp1 Size: 536KB - Virtual size: 1.6MB

.text
Size: 184KB - Virtual size: 182KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 68KB - Virtual size: 72KB

.rsrc
Size: 4KB - Virtual size: 176B

.vmp1
Size: 536KB - Virtual size: 1.6MB