1a7d9e1fd9f1205ca085255bcde426cb140c6630676601cc6f1738b24f17cd4d

General

Target

1a7d9e1fd9f1205ca085255bcde426cb140c6630676601cc6f1738b24f17cd4d
Size

798KB
MD5

20192e9956142b05b69b11a796718cf1
SHA1

46e7d1a4cc19f6abfd0912ad092d2e7c6194e8bc
SHA256

1a7d9e1fd9f1205ca085255bcde426cb140c6630676601cc6f1738b24f17cd4d
SHA512

2c7bd79adb9d266427dfd9b12467f5c65b3b6b41a6050b37deae4a9ba684d9708b416fc1cc797a1b79bbcc588baf835e986bae720fb0c7af3daf7da24fe688f9
SSDEEP

24576:ea591orCXhn1sXspfBKGsthTej/QndjHl+:t5oWx1so5ethy/QnZH4

Score

N/A

Malware Config

Signatures

Files

1a7d9e1fd9f1205ca085255bcde426cb140c6630676601cc6f1738b24f17cd4d
.exe windows x86

5c190ff0019d8fdbd46e5ebcee43950b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

IsValidLocale
GetLocaleInfoA
GetModuleFileNameA
HeapDestroy
CreateFileW
lstrlenA
GetTickCount
OpenEventW
AddAtomW
VirtualProtect
SetFilePointer
SuspendThread
GetCurrentThreadId
GetVersionExA
CreateDirectoryA
GetStdHandle
GetModuleHandleA
LocalFlags
CreateFileW
InterlockedExchange
GetFileAttributesW
LeaveCriticalSection
SetEvent
CreateMutexA
ResumeThread

user32

SetRect
DispatchMessageA
GetWindowTextA
MessageBoxA
GetWindowLongA
wsprintfA
DestroyIcon
IsMenu
GetWindowLongA
PeekMessageA
IsMenu
LoadCursorA
DestroyMenu

dplayx

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

advapi32

IsValidAcl

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 793KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5c190ff0019d8fdbd46e5ebcee43950b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

dplayx

advapi32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 793KB - Virtual size: 2.2MB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 793KB - Virtual size: 2.2MB