59d9507c3ebdd3fa4941572da5f0fa12052208faeb6bb2362a5f22432e732c67

Sharing

Copy URL

Twitter E-mail

General

Target

59d9507c3ebdd3fa4941572da5f0fa12052208faeb6bb2362a5f22432e732c67
Size

113KB
MD5

3bdb17bd97e2fcfea0c6c61025343ce0
SHA1

6597b088ba8c24535b5461ab3e0cd3ffc4e1d589
SHA256

59d9507c3ebdd3fa4941572da5f0fa12052208faeb6bb2362a5f22432e732c67
SHA512

f52f9e2a756700fc83c1480d9cc171daa8b3fd12e7b6d7b4a550c147eb6e775e6d089f644bf68f876c8db833ee5490f78474ab4ae0559c6f24906d5472c2a211
SSDEEP

1536:jY8eqjOolZ1w3tRc5h0xBejiFMp8EMDQlNn+0C5CF5DctUTUj6BSV5wV:s8jOo/1w3U5wALp8EMklNnSQ5Dc7W

Score

N/A

Malware Config

Signatures

Files

59d9507c3ebdd3fa4941572da5f0fa12052208faeb6bb2362a5f22432e732c67
.exe windows x86

415111a586dd2e05dc6b3f253ebf8d9f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateThread
WaitForSingleObject
SetThreadPriority
SetPriorityClass
ResetEvent
WaitForMultipleObjects
Sleep
GetThreadPriority
GetCurrentThread
LocalFree
GetCurrentProcess
CreateEventA
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
FreeLibrary
CreateFileA
DeviceIoControl
CloseHandle
GetLastError
GetPriorityClass
SetEvent

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
sprintf
exit

advapi32

RegOpenKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
RegCloseKey
SetServiceStatus
RegQueryValueExA

winmm

waveInUnprepareHeader
waveInClose
waveOutPrepareHeader
waveOutWrite
waveOutOpen
waveOutReset
waveOutUnprepareHeader
waveOutClose
waveOutRestart
waveInAddBuffer
waveInPrepareHeader
waveInReset
waveInOpen
waveInStart

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fravmec
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

415111a586dd2e05dc6b3f253ebf8d9f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

advapi32

winmm

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 43KB

.rsrc Size: 29KB - Virtual size: 30KB

fravmec Size: - Virtual size: 4KB

.2data Size: 72KB - Virtual size: 72KB

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 43KB

.rsrc
Size: 29KB - Virtual size: 30KB

fravmec
Size: - Virtual size: 4KB

.2data
Size: 72KB - Virtual size: 72KB