dfc90c5e3ce88218cde3d5a5cf74f17b638c5be79f8ca1527ce2316a7c016eca

General

Target

dfc90c5e3ce88218cde3d5a5cf74f17b638c5be79f8ca1527ce2316a7c016eca
Size

799KB
MD5

0040cc8e804e889bedf0446112710866
SHA1

75c210c8e8811e6675ecaaf310f4036d84a9105f
SHA256

dfc90c5e3ce88218cde3d5a5cf74f17b638c5be79f8ca1527ce2316a7c016eca
SHA512

fb7aeb2baccb8c978d010bfcd8f58bc0454f7bece8d6540eca89bbd218fe32275d0969a44a54974e17c559602b58be0e8ff2a8c83319e346c53600b273c76415
SSDEEP

24576:k1DLmppPo/cCz9U9reJSPnV8bl5kTpCqfqJF5aHJuCUst:YvmppPypSgSPsl5qrC5G1U6

Score

N/A

Malware Config

Signatures

Files

dfc90c5e3ce88218cde3d5a5cf74f17b638c5be79f8ca1527ce2316a7c016eca
.exe windows x86

af7b8e1494b4326ca020df6f16c9dd21

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetVersionExA
GetFileAttributesW
IsValidLocale
SetEvent
GetTickCount
CreateDirectoryA
ResumeThread
SuspendThread
LeaveCriticalSection
CreateFileW
CreateFileW
GetCurrentThreadId
AddAtomW
GetLocaleInfoA
SetFilePointer
InterlockedExchange
GetStdHandle
OpenEventW
lstrlenA
GetModuleFileNameA
LocalFlags
VirtualProtect
CreateMutexA
HeapDestroy
GetModuleHandleA

user32

DestroyIcon
DispatchMessageA
MessageBoxA
LoadCursorA
DestroyMenu
GetWindowLongA
PeekMessageA
GetWindowTextA
IsMenu
GetWindowLongA
SetRect
wsprintfA
IsMenu

dplayx

DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer

advapi32

IsValidAcl

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 794KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

af7b8e1494b4326ca020df6f16c9dd21

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

dplayx

advapi32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 794KB - Virtual size: 2.2MB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 794KB - Virtual size: 2.2MB