66459c2d01677f97a22ed064c81f2d77f7f57abfbdabc3078512138b0d8b3738

Sharing

Copy URL Twitter E-mail

General

Target

66459c2d01677f97a22ed064c81f2d77f7f57abfbdabc3078512138b0d8b3738
Size

272KB
MD5

938072f2f5d57999686ab8a639e9efbb
SHA1

6aea21ffd8f6ee27bb9b1d497b0c8f2d9503b1ff
SHA256

66459c2d01677f97a22ed064c81f2d77f7f57abfbdabc3078512138b0d8b3738
SHA512

3daef52b3a9f4b7afc54ca68e0ffd911d4e79db2bd1e4cbd5921a753f2c45404c3e2db8294b5d60c0952c4185cd7cd2e8a37b7083e2b3f76dc680f439b53ddd4
SSDEEP

6144:aRmKRO6UWmhzLw1I/u1tHxgIh5nQCrOOOko7:aRmEmr5U1Im3pHQCaOOf7

Score

N/A

Malware Config

Signatures

Files

66459c2d01677f97a22ed064c81f2d77f7f57abfbdabc3078512138b0d8b3738
.dll windows x86

cd6571e964409e250eed0ccb0fe916f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

avifil32

AVIFileRelease
AVIStreamRelease
AVIStreamSetFormat
AVIMakeCompressedStream
AVISaveOptions
AVIFileCreateStreamA
AVIStreamWrite
AVIStreamGetFrameOpen
AVIStreamStart
AVIFileGetStream
AVIStreamGetFrameClose
AVIFileOpenA
AVIFileInfoA
AVIStreamGetFrame
AVIFileInit
AVIFileExit

kernel32

CloseHandle
GetProcessHeap
HeapAlloc
VirtualQuery
GetModuleFileNameA
FlushFileBuffers
SetStdHandle
GetSystemInfo
VirtualAlloc
VirtualProtect
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
LCMapStringA
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetUnhandledExceptionFilter

user32

ReleaseDC
GetDesktopWindow
SetRect
GetDC

gdi32

SelectObject
SetDIBits
CreateCompatibleDC
CreateDIBSection
GetObjectA
DeleteObject
DeleteDC

tier0

AssertValidStringPtr
g_pMemAlloc
Warning
Msg
_AssertValidWritePtr
Error

vstdlib

KeyValuesSystem

Exports

Exports

CreateInterface

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cd6571e964409e250eed0ccb0fe916f8

Headers

File Characteristics

Imports

avifil32

kernel32

user32

gdi32

tier0

vstdlib

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 16KB

.reloc Size: 8KB - Virtual size: 6KB

.text Size: 196KB - Virtual size: 196KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 16KB

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 196KB - Virtual size: 196KB