c3970dad12525684355a49df3f482e5e638a40b70bfb947ed54fa458b14027a3

Sharing

Copy URL Twitter E-mail

General

Target

c3970dad12525684355a49df3f482e5e638a40b70bfb947ed54fa458b14027a3
Size

340KB
MD5

4db92c88575b3c8ef4583757d95c15c3
SHA1

7f161db7f41f043cdf39c8d3aa10c1d43a7054ca
SHA256

c3970dad12525684355a49df3f482e5e638a40b70bfb947ed54fa458b14027a3
SHA512

fa93dc564a28bff25abef4ed9115b7d55396075f5608c21eb2679953c7c66ee9da0d5c05dceb7e505e2b760555eac11e8d2f33413e8665d11abaaa59e151da0c
SSDEEP

6144:PuqgnRhPLs6r8YiMMCMMysQhYCG7LG1JdUeu1EN2OeQqL:PuvReybyL27uJdUEe9

Score

N/A

Malware Config

Signatures

Files

c3970dad12525684355a49df3f482e5e638a40b70bfb947ed54fa458b14027a3
.exe windows x86

c1bb84fb62ecffa3b7d9bba458b7f096

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dplayx

ord4

ddraw

DirectDrawCreate

dsound

ord1

dinput

DirectInputCreateA

comctl32

ord17

kernel32

lstrcpyA
GlobalLock
GetComputerNameA
LocalFree
LocalAlloc
GlobalUnlock
GlobalHandle
GetTickCount
GlobalFree
GetDriveTypeA
InterlockedExchange
WaitForSingleObject
SetEvent
ExitThread
WaitForMultipleObjects
_lopen
_lread
_lclose
OutputDebugStringA
GetModuleHandleA
FindResourceA
LoadResource
GetDiskFreeSpaceA
CreateThread
WriteFile
ReadFile
CreateFileA
CloseHandle
CreateEventA
GetLastError
LockResource
GetSystemDefaultLCID
GlobalAlloc
HeapSize
GetProcAddress
HeapAlloc
HeapFree
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
GetFullPathNameA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
HeapReAlloc
GetEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetACP
GetOEMCP
GetCPInfo
HeapCreate
VirtualFree
HeapDestroy
SetStdHandle
VirtualAlloc
RtlUnwind
LCMapStringW
GetFileAttributesA
LCMapStringA
CreateProcessA
GetStringTypeA
GetExitCodeProcess
RaiseException
FlushFileBuffers
LoadLibraryA
GetStringTypeW

user32

DeferWindowPos
EndDeferWindowPos
ShowWindow
PeekMessageA
ClientToScreen
SetDlgItemInt
SendMessageA
DispatchMessageA
FindWindowA
EnableWindow
SendDlgItemMessageA
DestroyWindow
GetParent
GetMessageA
SetDlgItemTextA
KillTimer
SetTimer
EndDialog
PostMessageA
DialogBoxParamA
LoadImageA
TranslateMessage
BeginDeferWindowPos
SystemParametersInfoA
LoadIconA
UpdateWindow
CreateWindowExA
SetWindowLongA
GetMenu
LoadCursorA
PostQuitMessage
CheckMenuItem
AdjustWindowRectEx
SetWindowPos
DefWindowProcA
EnableMenuItem
DrawMenuBar
GetSubMenu
TrackPopupMenu
SetMenuItemInfoA
BeginPaint
EndPaint
SetCursorPos
GetCursorPos
GetKeyState
GetWindowLongA
SetCursor
GetDC
OffsetRect
SetRect
CopyRect
GetDlgItemInt
IsDlgButtonChecked
CheckDlgButton
wsprintfA
LoadBitmapA
GetDlgItemTextA
IsWindowEnabled
CreateDialogParamA
GetClientRect
GetDlgItem
LoadMenuA
RegisterClassA

gdi32

DeleteDC
GetObjectA
SelectObject
CreateCompatibleDC
SetPixel
GetPixel
GetTextExtentPoint32A
GetStockObject
DeleteObject
StretchBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
GetUserNameA
RegCreateKeyExA
RegSetValueExA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

winmm

mmioDescend
auxGetVolume
waveOutGetVolume
waveOutSetVolume
auxSetVolume
waveOutGetNumDevs
waveOutGetDevCapsA
auxGetNumDevs
auxGetDevCapsA
timeGetTime
timeKillEvent
timeSetEvent
mmioOpenA
mmioRead
mmioAscend
mmioSeek
mmioClose
mciSendCommandA

Sections

.text
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 34KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c1bb84fb62ecffa3b7d9bba458b7f096

Headers

File Characteristics

Imports

dplayx

ddraw

dsound

dinput

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

ole32

winmm

Sections

.text Size: 150KB - Virtual size: 150KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 34KB - Virtual size: 2.2MB

.rsrc Size: 146KB - Virtual size: 148KB

.text
Size: 150KB - Virtual size: 150KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 34KB - Virtual size: 2.2MB

.rsrc
Size: 146KB - Virtual size: 148KB