fe3c16cc97db9d7b15bcba773dde9e235da8d2d08b56e53db8e8bd125cceee4d

General

Target

fe3c16cc97db9d7b15bcba773dde9e235da8d2d08b56e53db8e8bd125cceee4d
Size

798KB
MD5

4cf211a2849ff126819592347dff9ef0
SHA1

5410570d98ad883bcca16d09f5322719f80a5241
SHA256

fe3c16cc97db9d7b15bcba773dde9e235da8d2d08b56e53db8e8bd125cceee4d
SHA512

deb8ede1e8b24001d9b1ffec8e1c7b2c7e81b901ad3243800ccf3f292a7609daaef48e434588909d65afeba4c4eb4f6bd96983473ef4629c7fd926fc97d18d06
SSDEEP

24576:sC9EgOGy1sTtyg4i/lpJ6t6N5RTXb9wN1zPKjponCTo:xEgQGxcGlpItkXxwTLK1onUo

Score

N/A

Malware Config

Signatures

Files

fe3c16cc97db9d7b15bcba773dde9e235da8d2d08b56e53db8e8bd125cceee4d
.exe windows x86

caf2fd6de63b2d1a71447ee6900ad470

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
SetFilePointer
HeapDestroy
lstrlenA
GetTickCount
ResumeThread
CreateFileW
AddAtomA
OpenEventW
CreateDirectoryA
GetLocaleInfoA
LeaveCriticalSection
PulseEvent
VirtualProtect
GetFileAttributesW
SetEvent
GetCurrentThreadId
CreateMutexA
IsValidLocale
InterlockedExchange
GetVersionExA
CreateFileW
GetModuleFileNameA
SuspendThread
LocalFlags

user32

SetFocus
SetRect
LoadCursorA
PeekMessageA
DispatchMessageA
GetWindowTextA
wsprintfA
GetWindowLongA
DestroyIcon
MessageBoxA
GetWindowLongA
DestroyMenu
IsMenu

dplayx

DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllUnregisterServer

advapi32

IsValidAcl

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 793KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

caf2fd6de63b2d1a71447ee6900ad470

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

dplayx

advapi32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 793KB - Virtual size: 2.2MB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 793KB - Virtual size: 2.2MB