9768700674ce3116923f024a8007ff72e046fc1ef04e300348198180ee4e62fb

Sharing

Copy URL Twitter E-mail

General

Target

9768700674ce3116923f024a8007ff72e046fc1ef04e300348198180ee4e62fb
Size

380KB
MD5

3de0bf83d708a9c93fd03bc4ad312d45
SHA1

a0c80fb7648e5a88668ae9478ab7a65f55dbdfc5
SHA256

9768700674ce3116923f024a8007ff72e046fc1ef04e300348198180ee4e62fb
SHA512

65b926d7375b2f6c4b3a488c0dd3a0cc54e7430245bbc73dbe5610709704724884da0232c1ffc8e7f900f64a4b8878d8eb6f02dfa746ff83af64c5a9fa0fef8a
SSDEEP

6144:pY8ycKiQXOWPXFuZvmYHP8DP82q7EQzHFHVrmy5xIu5UhX4PkWz7F:dy9iQdXF7YvAP8bEQzHFHVrmy5xIu5UG

Score

N/A

Malware Config

Signatures

Files

9768700674ce3116923f024a8007ff72e046fc1ef04e300348198180ee4e62fb
.exe windows x86

d38bd951bce79680ed9538e23ecf68ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreate

dsound

ord1

winmm

mciSendStringA

kernel32

CreateFileMappingA
CreateFileA
LockResource
LoadResource
FindResourceA
LocalAlloc
LocalFree
CloseHandle
UnmapViewOfFile
_hread
_llseek
GetTickCount
Sleep
_lread
_lopen
CreateDirectoryA
GetWindowsDirectoryA
CompareStringW
CompareStringA
RaiseException
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
SetEndOfFile
FlushFileBuffers
SetStdHandle
VirtualFree
HeapCreate
HeapDestroy
MapViewOfFile
OutputDebugStringA
OpenFile
_lclose
_lcreat
_lwrite
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetEnvironmentVariableA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapFree
HeapAlloc
GetProcAddress
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
WideCharToMultiByte
UnhandledExceptionFilter
GetModuleFileNameA

user32

WaitMessage
SetCursorPos
wvsprintfA
SetCursor
DefWindowProcA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
FindWindowA
PostMessageA
SetRect

gdi32

GetStockObject
CreateFontA
GetFontLanguageInfo
SetTextColor
TextOutA
SelectObject
SetBkMode

Sections

.text
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d38bd951bce79680ed9538e23ecf68ca

Headers

File Characteristics

Imports

ddraw

dsound

winmm

kernel32

user32

gdi32

Sections

.text Size: 344KB - Virtual size: 344KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 392KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 344KB - Virtual size: 344KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 392KB

.rsrc
Size: 12KB - Virtual size: 12KB