01897364d1761a8289e3502010588a5b3fa5350b284a591e0a1748d7743683f3

General

Target

01897364d1761a8289e3502010588a5b3fa5350b284a591e0a1748d7743683f3
Size

799KB
MD5

07ca389a15221762c05836c6189bc886
SHA1

c5329a96a4023a0babfbcb98262b91f05e4fe9f7
SHA256

01897364d1761a8289e3502010588a5b3fa5350b284a591e0a1748d7743683f3
SHA512

15fb2f04ab66ae92d014744ef33cb4790be1a102c4bc85fca7dcff9e4d2d5be26bd7ba9d21964e71b09a782f772ddb82525479d028ec76a21865b3a388a7a594
SSDEEP

12288:G1dyS0SrcHrN6fLXA+/yc56bEVrpum+40AvKy2S1O2sh3+GfW+qWPRmyvg:M+5Ij//5zNpuxyvh2x/oG7myv

Score

N/A

Malware Config

Signatures

Files

01897364d1761a8289e3502010588a5b3fa5350b284a591e0a1748d7743683f3
.exe windows x86

0e77d2e5c76c162374846b0d41f21b50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

InterlockedExchange
GetModuleHandleA
CreateDirectoryA
ResumeThread
CreateMutexA
GetCurrentThreadId
HeapDestroy
SetEvent
GetModuleFileNameA
SetFilePointer
GetFileAttributesW
LocalFlags
GetStdHandle
OpenEventW
IsValidLocale
SuspendThread
CreateFileW
VirtualProtect
LeaveCriticalSection
lstrlenA
CreateFileW
GetLocaleInfoA
AddAtomW
GetVersionExA
GetTickCount

user32

DispatchMessageA
DestroyIcon
MessageBoxA
IsMenu
wsprintfA
LoadCursorA
GetWindowTextA
IsMenu
SetRect
PeekMessageA
DestroyMenu
GetWindowLongA
GetWindowLongA

dplayx

DllRegisterServer
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow

advapi32

IsValidAcl

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 794KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0e77d2e5c76c162374846b0d41f21b50

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

dplayx

advapi32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 794KB - Virtual size: 2.2MB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 794KB - Virtual size: 2.2MB