fea32f7f089eeda9de8df0a1708fce5d8b6b8d473f4b9d689b77d5e292dcdc5c

Sharing

Copy URL Twitter E-mail

General

Target

fea32f7f089eeda9de8df0a1708fce5d8b6b8d473f4b9d689b77d5e292dcdc5c
Size

289KB
MD5

0fd1045ff0dc7dad0085f39f47e38fd0
SHA1

b06ac3034cfcf789aaff335c7de4b62e568230a3
SHA256

fea32f7f089eeda9de8df0a1708fce5d8b6b8d473f4b9d689b77d5e292dcdc5c
SHA512

ed2f0997c3ae08e82c01d31ec238c3789cb03abfd84ec4718080e77344f61becce625b0f3bbd9b33dc23b5c4f95fdc6d561e5a8b944b4a1e1dfbdbcfcb3d1445
SSDEEP

6144:s7JgKPSXU39zCvHni6WjlHlPH5i1wcQ3hiAGZzrPY5U+Iq1WXFKCJs6wjJ:s7JgKPmUtcHnPUlHxZi1wcQ3hiA6fY5n

Score

N/A

Malware Config

Signatures

Files

fea32f7f089eeda9de8df0a1708fce5d8b6b8d473f4b9d689b77d5e292dcdc5c
.exe windows x86

8519691108d51e4c873adc5685c40efa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItemTextW
GetDlgItem
GetDialogBaseUnits
GetWindowRect
CreateDialogParamW
LoadStringW
DestroyWindow
EnableWindow
GetSystemMetrics
SetWindowLongW
SetWindowTextW
SetDlgItemTextW
MessageBoxW
DrawTextW
GetWindowLongW
SetFocus
GetWindow
SystemParametersInfoW
GetClientRect
SendMessageW
GetParent
EndDialog
CopyRect
ShowWindow
MapWindowPoints
CharNextW
DialogBoxParamW
SetWindowPos
SendDlgItemMessageW
LoadImageW

kernel32

SizeofResource
InterlockedDecrement
OutputDebugStringA
FlushInstructionCache
lstrcatW
DeleteCriticalSection
LoadLibraryA
lstrlenW
LoadResource
lstrcpyW
FreeLibrary
EnterCriticalSection
LoadLibraryExW
HeapAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
GlobalAlloc
MultiByteToWideChar
HeapFree
GlobalFindAtomW
IsValidCodePage
LeaveCriticalSection
FormatMessageW
LocalFree
VirtualFree
LoadLibraryW
GetProcAddress
SetLastError
GetTickCount
HeapDestroy
GetStartupInfoA
FindResourceW
GetSystemTimeAsFileTime
InterlockedIncrement
GetCurrentProcess
GetLastError
GetCurrentProcessId
lstrlenA
lstrcmpiW
GetModuleFileNameW
lstrcpynW
GetProcessHeap

advapi32

GetTraceLoggerHandle
RegOpenKeyExW
RegSetValueExW
RegCloseKey
GetTraceEnableLevel
RegDeleteKeyW
TraceMessage
RegEnumKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteValueW
RegCreateKeyExW
GetTraceEnableFlags
RegisterTraceGuidsW

wmadmod

DllUnregisterServer
DllCanUnloadNow
DllRegisterServer

wmasf

ASFGUIDToCodecID

winmm

waveOutGetNumDevs
waveOutGetID

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8519691108d51e4c873adc5685c40efa

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

advapi32

wmadmod

wmasf

winmm

Sections

.text Size: 112KB - Virtual size: 111KB

.rdata Size: 136KB - Virtual size: 135KB

.data Size: 512B - Virtual size: 91KB

.rsrc Size: 39KB - Virtual size: 38KB

.text
Size: 112KB - Virtual size: 111KB

.rdata
Size: 136KB - Virtual size: 135KB

.data
Size: 512B - Virtual size: 91KB

.rsrc
Size: 39KB - Virtual size: 38KB