c3137187f3991abdaf09c4e8c8a51e33057d4cfbcae15bcb75d8e9eee9730cf0

Sharing

Copy URL Twitter E-mail

General

Target

c3137187f3991abdaf09c4e8c8a51e33057d4cfbcae15bcb75d8e9eee9730cf0
Size

148KB
MD5

7cc22fd042f68581d330bc7533dab4f0
SHA1

694edf21d26663cd7faac0e6a6f491935f851a74
SHA256

c3137187f3991abdaf09c4e8c8a51e33057d4cfbcae15bcb75d8e9eee9730cf0
SHA512

1e13688eefc7addf36b5cf584fce2b8a8ad3518833ada7dac516802bfd0c1a11bdb590ebefb580a818347dc4c93b2c638148a72b59087f497178ab44d1384c39
SSDEEP

3072:OhbX7uBAB4zTdxddYFoJyQVN5RLibZ8UlCEj4MfIafA:OhbyOOzTdLiInVbklKM/A

Score

N/A

Malware Config

Signatures

Files

c3137187f3991abdaf09c4e8c8a51e33057d4cfbcae15bcb75d8e9eee9730cf0
.dll windows x86

8fd6f71924fadad3807495e6809880bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord823
ord641
ord616
ord793
ord656
ord2514
ord6467
ord3719
ord5265
ord4376
ord4998
ord6052
ord1775
ord5280
ord4425
ord3597
ord4407
ord3610
ord2411
ord2023
ord4218
ord2578
ord6055
ord4078
ord1776
ord4398
ord5241
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5731
ord1727
ord5714
ord2446
ord2124
ord5277
ord3402
ord4627
ord3582
ord567
ord324
ord2298
ord2362
ord2358
ord2302
ord4234
ord6334
ord4710
ord4853
ord1200
ord2642
ord6453
ord858
ord860
ord800
ord535
ord940
ord540
ord4160
ord3803
ord3317
ord2864
ord909
ord4185
ord696
ord801
ord6883
ord2614
ord2818
ord1168
ord394
ord541
ord537
ord3435
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord2512
ord2554
ord4486
ord6375
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord5261
ord3922
ord5065
ord4274

msvcrt

_initterm
_purecall
malloc
_ftol
free
realloc
__CxxFrameHandler
_mbscmp
atoi
isdigit
_mbsicmp
_CxxThrowException
_except_handler3
memmove
__dllonexit
_adjust_fdiv
_strcmpi
??1type_info@@UAE@XZ
_onexit

kernel32

LocalFree
FindResourceA
SizeofResource
LoadResource
LockResource
InterlockedDecrement
InterlockedIncrement
LocalAlloc

user32

SendMessageA
RedrawWindow
IsWindow
GetWindowTextA
SetWindowTextA
GetClassNameA
GetWindowLongA
GetWindow
EnableWindow

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA

Exports

Exports

NERO_PLUGIN_GetPrimaryAudioObject
NERO_PLUGIN_ReadyToFinish

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8fd6f71924fadad3807495e6809880bb

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 12KB - Virtual size: 9KB

.reloc Size: 4KB - Virtual size: 2KB

.text Size: 100KB - Virtual size: 100KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 12KB - Virtual size: 9KB

.reloc
Size: 4KB - Virtual size: 2KB

.text
Size: 100KB - Virtual size: 100KB