e425bdca68db8f8b7b845eefced1c78687419ab64e1057d02cf0809066d8e40c

Sharing

Copy URL Twitter E-mail

General

Target

e425bdca68db8f8b7b845eefced1c78687419ab64e1057d02cf0809066d8e40c
Size

575KB
MD5

50dc2c9d1e7f6540ae619282a5ce01c7
SHA1

99abdeb8417bc65d1214061255be04fd6bf8ab54
SHA256

e425bdca68db8f8b7b845eefced1c78687419ab64e1057d02cf0809066d8e40c
SHA512

9d35d9fa20e598f2d0ecd9a9c4e16d199fe250c77b1bcf946441662726af217fed5df30391c0b5c0d5065704546ae0e5174e55d8a577a446a813e551ee64ac40
SSDEEP

12288:jvZF0vm0WeCMnGlCARIGLfASXKUJ5mnuDFjsorXGoeVMB+jGc:L0vm0WeCMLARIGLfASXKUJ5mnjor2oe/

Score

N/A

Malware Config

Signatures

Files

e425bdca68db8f8b7b845eefced1c78687419ab64e1057d02cf0809066d8e40c
.exe windows x86

10c5bbbc79bdf5c818820d685af8e6a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreate

dinput

DirectInputCreateA

dsound

DirectSoundCreate
DirectSoundEnumerateA

gdi32

GetDIBits
GetDeviceCaps
GetObjectA
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
SelectObject
SelectPalette
CreateCompatibleBitmap
SetPaletteEntries
CreateCompatibleDC
StretchBlt
StretchDIBits
CreateDIBitmap
CreatePalette
CreateSolidBrush
DeleteDC
DeleteObject

kernel32

EnterCriticalSection
ExitProcess
FormatMessageA
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentThread
CloseHandle
GetLastError
GetLogicalDrives
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetThreadPriority
GetVersion
GetVersionExA
InitializeCriticalSection
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
CreateEventA
OutputDebugStringA
PulseEvent
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseMutex
ResetEvent
SetEvent
SetThreadPriority
CreateMutexA
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForMultipleObjects
WaitForSingleObject
DeleteCriticalSection
DuplicateHandle

msvcrt

_dup
_write
_lseek
_open
_read
_close
_strdup
_stricmp
_unlink
_assert
_beginthread
_cexit
_errno
_fileno
_findclose
_findfirst
_findnext
_fmode
_fpreset
_getdcwd
_getdrive
_iob
_setjmp
_setmode
_stat
__getmainargs
abort
atan
atexit
atof
calloc
clock
cos
exit
fclose
fflush
fmod
fopen
fprintf
fputs
fread
free
fwrite
getenv
__p__environ
log10
longjmp
malloc
memcpy
memmove
memset
pow
qsort
rand
realloc
signal
sin
sprintf
sqrt
srand
strcmp
strcpy
strerror
strlen
strpbrk
strstr
strtod
strtol
time
tmpnam
vsprintf
__set_app_type

ole32

CoInitialize
CoUninitialize
CoCreateInstance

user32

AdjustWindowRect
DefWindowProcA
DispatchMessageA
EnableMenuItem
CallWindowProcA
EndPaint
GetActiveWindow
GetClassLongA
GetClientRect
GetCursorPos
GetDC
GetForegroundWindow
GetKeyboardState
GetMessageA
GetSystemMenu
GetWindowLongA
GetWindowRect
IsIconic
KillTimer
LoadCursorA
LoadIconA
MessageBoxA
MessageBoxW
MoveWindow
PostMessageA
PostQuitMessage
RedrawWindow
RegisterClassA
RegisterWindowMessageA
ReleaseDC
SendMessageA
SetClassLongA
SetCursorPos
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ClientToScreen
ShowCursor
ShowWindow
SystemParametersInfoA
TranslateMessage
UpdateWindow
keybd_event
CreateWindowExA
BeginPaint

winmm

timeGetTime
waveOutClose
waveOutGetPosition
waveOutGetVolume
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutSetVolume
waveOutUnprepareHeader
waveOutWrite
joyGetDevCapsA
joyGetNumDevs
joyGetPosEx
midiOutClose
midiOutGetDevCapsA
midiOutGetNumDevs
midiOutOpen
midiOutReset
midiOutSetVolume
midiOutShortMsg

Sections

.text
Size: 459KB - Virtual size: 459KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 12.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

10c5bbbc79bdf5c818820d685af8e6a2

Headers

File Characteristics

Imports

ddraw

dinput

dsound

gdi32

kernel32

msvcrt

ole32

user32

winmm

Sections

.text Size: 459KB - Virtual size: 459KB

.data Size: 36KB - Virtual size: 35KB

.bss Size: - Virtual size: 12.4MB

.idata Size: 6KB - Virtual size: 6KB

.ndata Size: 72KB - Virtual size: 72KB

.text
Size: 459KB - Virtual size: 459KB

.data
Size: 36KB - Virtual size: 35KB

.bss
Size: - Virtual size: 12.4MB

.idata
Size: 6KB - Virtual size: 6KB

.ndata
Size: 72KB - Virtual size: 72KB