283b2ab873cfffd77d403bd0d51f48cc8e954c92ba75b60d444cf79e482bc36c

Sharing

Copy URL Twitter E-mail

General

Target

283b2ab873cfffd77d403bd0d51f48cc8e954c92ba75b60d444cf79e482bc36c
Size

1.9MB
MD5

0288ccce25c253087d3ee4cf10299114
SHA1

b2ab6a73e65af4f47dfdde56df5a861b4affa429
SHA256

283b2ab873cfffd77d403bd0d51f48cc8e954c92ba75b60d444cf79e482bc36c
SHA512

dbccc157ad2d2a06e76aa2554ca8f9823e572dce3c0f12569cf25e3166bd44dbf03e5f954c2a84a83569ede44e78d7b1c651cc513a81073acff049267a36aa24
SSDEEP

24576:5rdI7ucpkOY12aBKZZThIYPXxFZ3MnQbjHuGqYHpe8I8eHg+9oVDpT4d8tlxslBD:/sDY1sucDHHu0e8sHN4lgBo

Score

N/A

Malware Config

Signatures

Files

283b2ab873cfffd77d403bd0d51f48cc8e954c92ba75b60d444cf79e482bc36c
.exe windows x86

2bb6e6de0062a9988f86ef6cef6248cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindNextFileA
FindFirstFileA
GetVersionExA
GetModuleHandleA
CloseHandle
GetSystemDefaultLangID
GetLastError
GetTickCount
ReadFile
GetFileSize
CreateFileA
lstrcatA
DeleteFileA
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
RaiseException
HeapAlloc
GetStartupInfoA
GetVersion
ExitProcess
HeapReAlloc
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetSystemTimeAsFileTime
WriteFile
SetFilePointer
SetHandleCount
GetStdHandle
FreeLibrary
LoadLibraryA
GetCurrentProcess
HeapSize
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
FlushFileBuffers
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
SetEndOfFile
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
GetExitCodeProcess
IsProcessorFeaturePresent
CreateEventA
SetEvent
WaitForSingleObjectEx
GetProcAddress
QueryPerformanceCounter
lstrcpyA
QueryPerformanceFrequency
Sleep
GetLocalTime
OutputDebugStringA
InterlockedExchange
CreateProcessA
GetCommandLineA
GetFileType
TerminateProcess
HeapFree
SetEnvironmentVariableA

user32

GetDC
ChangeDisplaySettingsA
GetWindowRect
ClientToScreen
LoadStringA
LoadBitmapA
DestroyWindow
ReleaseDC
SetCursorPos
MessageBoxA
SetRectEmpty
EnumDisplaySettingsA
FillRect
ScreenToClient
GetCursorPos
GetWindowLongA
GetClientRect
SetWindowPos
ClipCursor
GetAsyncKeyState
GetKeyState
RegisterWindowMessageA
GetForegroundWindow
PostThreadMessageA
GetMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
DefWindowProcA
BeginPaint
EndPaint
SetCursor
SetCapture
ReleaseCapture
LoadCursorA
LoadIconA
RegisterClassExA
GetSystemMetrics
SetRect
ShowWindow
CreateWindowExA
GetClassLongA
SetWindowLongA
SendMessageA
UnregisterClassA
UpdateWindow
ShowCursor
WaitForInputIdle

d3d8

Direct3DCreate8

winmm

mixerGetLineInfoA
mixerGetLineControlsA
auxGetNumDevs
waveOutGetNumDevs
auxGetDevCapsA
mixerGetControlDetailsA
mixerGetNumDevs
mixerSetControlDetails
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
timeKillEvent
timeSetEvent
waveOutClose
waveOutUnprepareHeader
waveOutWrite
waveOutPrepareHeader
waveOutOpen
waveOutReset
mciSendCommandA
timeGetTime
mciGetErrorStringA

ddraw

DirectDrawCreate
DirectDrawEnumerateA

dinput

DirectInputCreateA
DirectInputCreateEx

dsound

ord1

avifil32

AVIFileInit

gdi32

CreateFontIndirectA
TextOutW
SetBkColor
CreateDCA
CreateCompatibleBitmap
CreateSolidBrush
CreateFontA
GetGlyphOutlineA
SelectObject
BitBlt
CreateCompatibleDC
DeleteDC
SetPixel
GetPixel
GetObjectA
SetTextColor
SetBkMode
TextOutA
DeleteObject
CreateDIBSection

advapi32

RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

ws2_32

inet_addr
ntohl
inet_ntoa
htonl
gethostbyname
gethostname
getsockname
socket
bind
connect
WSAGetLastError
select
ioctlsocket
setsockopt
WSACleanup
WSAStartup
recvfrom
htons
sendto
recv
ntohs
send
closesocket

snmpapi

SnmpUtilOidCpy
SnmpUtilOidNCmp
SnmpUtilVarBindFree

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xnfasqp
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2bb6e6de0062a9988f86ef6cef6248cf

Headers

File Characteristics

Imports

kernel32

user32

d3d8

winmm

ddraw

dinput

dsound

avifil32

gdi32

advapi32

ole32

ws2_32

snmpapi

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 112KB - Virtual size: 111KB

.data Size: 72KB - Virtual size: 2.2MB

.data1 Size: 4KB - Virtual size: 2KB

.rsrc Size: 44KB - Virtual size: 44KB

xnfasqp Size: 24KB - Virtual size: 24KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 112KB - Virtual size: 111KB

.data
Size: 72KB - Virtual size: 2.2MB

.data1
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 44KB - Virtual size: 44KB

xnfasqp
Size: 24KB - Virtual size: 24KB