d7a1f305e229d08b1c79e982a278d65bda4ff9158e424581d6927f50d705c57d

Sharing

Copy URL Twitter E-mail

General

Target

d7a1f305e229d08b1c79e982a278d65bda4ff9158e424581d6927f50d705c57d
Size

465KB
MD5

1091bbad6fded23ee6ef8d83b79f3571
SHA1

1787df1f7caf4bc0350eeffcee72307feb810fd2
SHA256

d7a1f305e229d08b1c79e982a278d65bda4ff9158e424581d6927f50d705c57d
SHA512

43635a3ed2b03fe9419de08a6ed406c36ca3ad8a8b35b8a21cfb5dd0c38cbcf4e581dc5f8a48693b4d609524417371654f88b550a613af3a5254fc016257248b
SSDEEP

12288:erTUV+CgJS2WKOcz4T35LMeRk8ERqFsLD:sTUV+CMSeDml9swsn

Score

N/A

Malware Config

Signatures

Files

d7a1f305e229d08b1c79e982a278d65bda4ff9158e424581d6927f50d705c57d
.exe windows x86

3ebd0c848e9a2ce49025e996efc44aff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
LocalFree
GlobalReAlloc
ExitProcess
GetTempPathA
VirtualAlloc
GetProcAddress
InterlockedExchange
VirtualFree
ResumeThread
GetTickCount
SetFirmwareEnvironmentVariableA
Sleep
GetLastError
RemoveDirectoryW
GetLocaleInfoA
CreateMutexA
GetLocalTime
GetCommandLineA
GetStartupInfoA
HeapAlloc
RaiseException
GetModuleHandleA
SetUnhandledExceptionFilter
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

ShowWindow
MessageBoxA
GetSystemMetrics

winmm

midiStreamOut
midiOutReset
midiStreamOpen
joySetCapture

avifil32

AVIFileOpenA

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.VDXE
Size: 1024B - Virtual size: 551B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 391KB - Virtual size: 391KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ebd0c848e9a2ce49025e996efc44aff

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

winmm

avifil32

Sections

.text Size: 49KB - Virtual size: 49KB

.VDXE Size: 1024B - Virtual size: 551B

.rdata Size: 391KB - Virtual size: 391KB

.data Size: 13KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 400KB

.text
Size: 49KB - Virtual size: 49KB

.VDXE
Size: 1024B - Virtual size: 551B

.rdata
Size: 391KB - Virtual size: 391KB

.data
Size: 13KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 400KB