8eb23005b4702ef9d780a98fba3c44573c0d769995c2ac730c46bf0ce131e229

Sharing

Copy URL

Twitter E-mail

General

Target

8eb23005b4702ef9d780a98fba3c44573c0d769995c2ac730c46bf0ce131e229
Size

465KB
MD5

91a5d5d28fbbc0eab6b4dda1b0ee4410
SHA1

8a56a53acf722d855eb67bbefc6e29a3209666bd
SHA256

8eb23005b4702ef9d780a98fba3c44573c0d769995c2ac730c46bf0ce131e229
SHA512

f3cf291c984a9d5f999a184e4e83889ad7ca6a9ca66e898188d2ea4c42792055b7da1491b575c895bbce7fd584fcd212d49e3014c5427f5661006f8399eb0097
SSDEEP

12288:mrTUV+CgJS2WKOcz4T35LMeRk8ERqFsL7i:0TUV+CMSeDml9sws6

Score

N/A

Malware Config

Signatures

Files

8eb23005b4702ef9d780a98fba3c44573c0d769995c2ac730c46bf0ce131e229
.exe windows x86

3ebd0c848e9a2ce49025e996efc44aff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
LocalFree
GlobalReAlloc
ExitProcess
GetTempPathA
VirtualAlloc
GetProcAddress
InterlockedExchange
VirtualFree
ResumeThread
GetTickCount
SetFirmwareEnvironmentVariableA
Sleep
GetLastError
RemoveDirectoryW
GetLocaleInfoA
CreateMutexA
GetLocalTime
GetCommandLineA
GetStartupInfoA
HeapAlloc
RaiseException
GetModuleHandleA
SetUnhandledExceptionFilter
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

ShowWindow
MessageBoxA
GetSystemMetrics

winmm

midiStreamOut
midiOutReset
midiStreamOpen
joySetCapture

avifil32

AVIFileOpenA

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.VDXE
Size: 1024B - Virtual size: 551B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 391KB - Virtual size: 391KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ebd0c848e9a2ce49025e996efc44aff

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

winmm

avifil32

Sections

.text Size: 49KB - Virtual size: 49KB

.VDXE Size: 1024B - Virtual size: 551B

.rdata Size: 391KB - Virtual size: 391KB

.data Size: 13KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 400KB

.text
Size: 49KB - Virtual size: 49KB

.VDXE
Size: 1024B - Virtual size: 551B

.rdata
Size: 391KB - Virtual size: 391KB

.data
Size: 13KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 400KB