e987563b606e942791bff7620dcbc0d97c76f48e54cb6cdea0c870ba875291bd

Sharing

Copy URL Twitter E-mail

General

Target

e987563b606e942791bff7620dcbc0d97c76f48e54cb6cdea0c870ba875291bd
Size

416KB
MD5

0b033692dff3f6a453d69fd5d7378110
SHA1

4f775283ade700beb7a89454ba2747ce2020090a
SHA256

e987563b606e942791bff7620dcbc0d97c76f48e54cb6cdea0c870ba875291bd
SHA512

dd5a5e207c8f081307f737ae2e52406e6446fb770381b6e95ca06949499fa43431177accbd94a9f1279259c57eccee6098a29c1e45c041d7f308bea6d07a13db
SSDEEP

6144:pYYyCqq9OhKR7LXqs7EJSIUZJvmNuCwqPbt4maUujH4AO+OY+sbzjE2+:pfyiOhKR7jq/UZUTt4maUJxY+sbz4/

Score

N/A

Malware Config

Signatures

Files

e987563b606e942791bff7620dcbc0d97c76f48e54cb6cdea0c870ba875291bd
.dll windows x86

d07659b6753d1756751b4acfe845fa90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
GetModuleFileNameA
OutputDebugStringA
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
RtlUnwind
MultiByteToWideChar
ReadFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
CloseHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
RaiseException
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile

user32

MessageBoxA

Exports

Exports

beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_params
lame_mp3_tags_fid
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right

Sections

.text
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d07659b6753d1756751b4acfe845fa90

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 240KB - Virtual size: 238KB

.rdata Size: 92KB - Virtual size: 89KB

.data Size: 8KB - Virtual size: 217KB

.reloc Size: 12KB - Virtual size: 10KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 240KB - Virtual size: 238KB

.rdata
Size: 92KB - Virtual size: 89KB

.data
Size: 8KB - Virtual size: 217KB

.reloc
Size: 12KB - Virtual size: 10KB

.rmnet
Size: 60KB - Virtual size: 60KB