c6bebef181c3ffe2bc73252b84661b82a150f4f2c2479ef49c2f0f0a2255544d

General

Target

c6bebef181c3ffe2bc73252b84661b82a150f4f2c2479ef49c2f0f0a2255544d
Size

799KB
MD5

039d178a5d36f5df94810171ba00df46
SHA1

a86957411164e04fb70ece8e965bee37dccbc290
SHA256

c6bebef181c3ffe2bc73252b84661b82a150f4f2c2479ef49c2f0f0a2255544d
SHA512

1ee2b2e962054935b2e2970c5cfde28d26f3e2e206dcf1d067b106b8afd50eddb8d30f109c08efbc71c9a326a6b6b599e80688e4625c1a1df80d57a0632f3192
SSDEEP

24576:ZyU8LiBnAY7wz0aB28es5pI9dxOz9aX0Or/g:ZoqVaB1zpI9dYz9E

Score

N/A

Malware Config

Signatures

Files

c6bebef181c3ffe2bc73252b84661b82a150f4f2c2479ef49c2f0f0a2255544d
.exe windows x86

6ef6e534d67345e596723c1bc819ea81

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateFileW
SuspendThread
GetModuleFileNameA
CreateDirectoryA
SetFilePointer
ResumeThread
LocalFlags
lstrlenA
IsValidLocale
CreateMutexA
HeapDestroy
GetStdHandle
GetCurrentThreadId
GetLocaleInfoA
GetTickCount
AddAtomW
VirtualProtect
GetVersionExA
SetEvent
GetModuleHandleA
CreateFileW
OpenEventW
GetFileAttributesW
InterlockedExchange
LeaveCriticalSection

user32

DestroyIcon
DestroyMenu
GetWindowLongA
GetWindowLongA
IsMenu
SetRect
GetWindowTextA
LoadCursorA
DispatchMessageA
IsMenu
MessageBoxA
wsprintfA
PeekMessageA

dplayx

DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject

advapi32

IsValidAcl

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 794KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6ef6e534d67345e596723c1bc819ea81

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

dplayx

advapi32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 794KB - Virtual size: 2.2MB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 794KB - Virtual size: 2.2MB