3aa5b21df9f8b0a48dedd1188bc7929901d4d4b7191321e19e854528e00d6b00

Sharing

Copy URL Twitter E-mail

General

Target

3aa5b21df9f8b0a48dedd1188bc7929901d4d4b7191321e19e854528e00d6b00
Size

460KB
MD5

4fe6817bdaa46bed729210f04c6ec5be
SHA1

a307335a46f5d5cb021ed22114584e37c48379ae
SHA256

3aa5b21df9f8b0a48dedd1188bc7929901d4d4b7191321e19e854528e00d6b00
SHA512

759df21adca5a2e62dbf0dcda5adf2ee457093a01a160a1b6365178c89995ac371951871f691cde9a4071f9a53d9ab097ae18171044b41a41ba7e19a064ee8ff
SSDEEP

6144:jumN0WXhi7nVIRGgpjgqTjvo03C2WhEa+71ibcz4ZBnE7O57coMeNTU18ypRqFZS:j5kV+CgJS2WKOcz4T35LMeRk8ERqFsb

Score

N/A

Malware Config

Signatures

Files

3aa5b21df9f8b0a48dedd1188bc7929901d4d4b7191321e19e854528e00d6b00
.exe windows x86

f0778dec32fee58affee8cbcfc925c32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
VirtualAlloc
GetProcAddress
InterlockedExchange
VirtualFree
ResumeThread
GetTickCount
SetFirmwareEnvironmentVariableA
CreateMutexA
GetLastError
RemoveDirectoryA
GlobalReAlloc
VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
GetLocaleInfoA
LocalFree
Sleep
InterlockedIncrement
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
HeapFree
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RaiseException
LCMapStringA
MultiByteToWideChar
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetStringTypeA
GetStringTypeW

user32

ShowWindow
LoadBitmapA
MessageBoxA
GetFocus
GetSystemMetrics
FindWindowA

winmm

midiStreamOut
midiOutReset
midiStreamProperty
joySetCapture

dnsapi

DnsAcquireContextHandle_A

avifil32

AVIFileOpenA

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.VDXE
Size: 4KB - Virtual size: 653B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 388KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0778dec32fee58affee8cbcfc925c32

Headers

File Characteristics

Imports

kernel32

user32

winmm

dnsapi

avifil32

Sections

.text Size: 36KB - Virtual size: 34KB

.VDXE Size: 4KB - Virtual size: 653B

.rdata Size: 388KB - Virtual size: 385KB

.data Size: 4KB - Virtual size: 5KB

.tdata Size: 12KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 420KB

.text
Size: 36KB - Virtual size: 34KB

.VDXE
Size: 4KB - Virtual size: 653B

.rdata
Size: 388KB - Virtual size: 385KB

.data
Size: 4KB - Virtual size: 5KB

.tdata
Size: 12KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 420KB