7ffbaf47a2012ead29c8aac4908da6dc479bc9d71b9d3441ea9dd9047555dcc7

Sharing

Copy URL Twitter E-mail

General

Target

7ffbaf47a2012ead29c8aac4908da6dc479bc9d71b9d3441ea9dd9047555dcc7
Size

95KB
MD5

642dbfbed9f03c2edcfdeeb5dee374d8
SHA1

99a6cd3b11a5ada870d222328700876cf3ba05b7
SHA256

7ffbaf47a2012ead29c8aac4908da6dc479bc9d71b9d3441ea9dd9047555dcc7
SHA512

e66c6a282dd97fb2812a4040fc44d4cacdd5a1ff43967dc17261b244fd4bbb941d2c038f861194d777813f0374c04e305d76b4e1259842570a8ba07ff377eac6
SSDEEP

1536:QcccgqEd89BNgUqeeiUrnyqHw5P/FU86fZwafp2BBrwYKAxKZoyqHqOKio8ozfhb:QHcE89BdTefrqFU/ZeB9wYBKZX3OKr8C

Score

N/A

Malware Config

Signatures

Files

7ffbaf47a2012ead29c8aac4908da6dc479bc9d71b9d3441ea9dd9047555dcc7
.dll windows x86

2c238bbecc68647d6e17fdda708464ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveInGetNumDevs
waveInGetDevCapsA
mixerOpen
mixerGetNumDevs
mixerGetID
mixerGetDevCapsA
mixerClose

user32

TranslateMessage
SystemParametersInfoA
ShowWindow
SetForegroundWindow
SendMessageA
ReleaseDC
RegisterClassA
PostQuitMessage
PostMessageA
LoadStringA
LoadImageA
LoadIconA
LoadCursorA
InsertMenuItemA
GetWindow
GetSysColor
GetMessageA
GetMenuCheckMarkDimensions
GetDesktopWindow
GetDC
GetCursorPos
GetClassNameA
DispatchMessageA
DestroyMenu
DefWindowProcA
CreateWindowExA
CreatePopupMenu

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
FreeSid

setupapi

SetupDiSetClassInstallParamsA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInstanceIdA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller

kernel32

SetEvent
SearchPathA
RtlUnwind
MultiByteToWideChar
LocalFree
LocalAlloc
LoadLibraryA
LCMapStringA
HeapFree
HeapDestroy
SetHandleCount
HeapAlloc
GetVersionExA
GetVersion
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcAddress
GetOEMCP
GetModuleHandleA
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteFile
lstrcmpiA
lstrcpyA
lstrlenA
HeapCreate
GetLastError
GetFileType
GetEnvironmentStringsA
GetCommandLineA
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
ExitProcess
CloseHandle
CreateEventA
CreateMutexA
CreateProcessA
GetModuleFileNameA

Sections

.text
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c238bbecc68647d6e17fdda708464ce

Headers

File Characteristics

Imports

winmm

user32

advapi32

setupapi

kernel32

Sections

.text Size: 81KB - Virtual size: 84KB

.data Size: 9KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 4KB

.text
Size: 81KB - Virtual size: 84KB

.data
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 4KB