8c6045cbefb55ce3edb640009ad2fb6f9ff36d7abe5bb921def3f7aef18f56fd

Sharing

Copy URL Twitter E-mail

General

Target

8c6045cbefb55ce3edb640009ad2fb6f9ff36d7abe5bb921def3f7aef18f56fd
Size

572KB
MD5

3b3842c528410b76e79856000cae07c0
SHA1

91100483e07791dd7e29e97b32e6d633cd702de7
SHA256

8c6045cbefb55ce3edb640009ad2fb6f9ff36d7abe5bb921def3f7aef18f56fd
SHA512

4da7edf4f1cbd326dbd6ff752b213a712d455e689ccaec14f307de9326a57e62e4b9319f4011b520442844c9a6a725c6bdd1ac5a74f39f779362d48f2768b790
SSDEEP

12288:/sI5BUdWd3XlYXUMP3OseVwodul9xEJSETAFGfR0c3cw5eBn5vQ2A:/sfelWUW94pTJfR0cuvBA

Score

N/A

Malware Config

Signatures

Files

8c6045cbefb55ce3edb640009ad2fb6f9ff36d7abe5bb921def3f7aef18f56fd
.dll windows x86

bf0a15d48ae68cc5a08db56a1b823fc5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

d3d8

Direct3DCreate8

kernel32

QueryPerformanceCounter
QueryPerformanceFrequency
GetProcAddress
GetModuleHandleA
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
ExitProcess
OutputDebugStringA
GetSystemTimeAsFileTime
GetVersionExA
LoadLibraryA

user32

MessageBoxA

advapi32

RegOpenKeyA
RegCloseKey
RegQueryValueExA

msvcp71

?_Nomemory@std@@YAXXZ

msvcr71

__CppXcptFilter
_adjust_fdiv
__CxxFrameHandler
fputs
_iob
??3@YAXPAX@Z
exit
tolower
_stricmp
fwrite
fread
fprintf
sprintf
sscanf
getenv
malloc
free
fclose
fopen
_vsnprintf
fseek
clearerr
ftell
strncpy
_CIpow
strtod
floor
_purecall
realloc
_snprintf
atof
_CIacos
_CIasin
ceil
memmove
strncmp
_CIfmod
??_V@YAXPAX@Z
qsort
strstr
toupper
_CxxThrowException
_ftol
_finite
_callnewh
__security_error_handler
_except_handler3
__dllonexit
_onexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm

Exports

Exports

InitializeFlash
InitializeFlashbyDevice
IsRenderFlash
LoadMediaFile
ReleaseFlash
RenderFlash

Sections

.text
Size: 368KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bf0a15d48ae68cc5a08db56a1b823fc5

Headers

File Characteristics

Imports

d3d8

kernel32

user32

advapi32

msvcp71

msvcr71

Exports

Exports

Sections

.text Size: 368KB - Virtual size: 365KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 20KB - Virtual size: 24KB

.data1 Size: 4KB - Virtual size: 2KB

.rsrc Size: 16KB - Virtual size: 14KB

.reloc Size: 32KB - Virtual size: 28KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 368KB - Virtual size: 365KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 20KB - Virtual size: 24KB

.data1
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 16KB - Virtual size: 14KB

.reloc
Size: 32KB - Virtual size: 28KB

.rmnet
Size: 60KB - Virtual size: 60KB