fd5afaa4d1617ce70d10021a39d2873d544fa084c102e1e88b56e45d32fcf3d8

General

Target

fd5afaa4d1617ce70d10021a39d2873d544fa084c102e1e88b56e45d32fcf3d8
Size

798KB
MD5

4043296198eac55d24aa455c63f9dd11
SHA1

d858e818acc62f7417c2e3f0d0ef7505cb6c1da6
SHA256

fd5afaa4d1617ce70d10021a39d2873d544fa084c102e1e88b56e45d32fcf3d8
SHA512

e29d943b454348a6b73f7cd165834b6498d9a90aa318a92dbbcd5418a865e36465607e04fecd98d1022bb050c75ec52009fb3f9ea53364f93bd8b5679eac29c4
SSDEEP

24576:7Gy/3lR+g9RZ+S6gC15klTPkdkaIPgx6v:7B/rB9eKlhuTIwI

Score

N/A

Malware Config

Signatures

Files

fd5afaa4d1617ce70d10021a39d2873d544fa084c102e1e88b56e45d32fcf3d8
.exe windows x86

376f38e4a0b8568c51f72d73b6ac47de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleFileNameA
OpenEventW
IsValidLocale
SetEvent
GetLocaleInfoA
GetVersionExA
lstrlenA
CreateFileW
CreateFileW
SuspendThread
CreateMutexA
GetStdHandle
HeapDestroy
ResumeThread
CreateDirectoryA
GetModuleHandleA
InterlockedExchange
LocalFlags
LeaveCriticalSection
SetFilePointer
VirtualProtect
GetFileAttributesW
GetTickCount
AddAtomW
GetCurrentThreadId

user32

LoadCursorA
DestroyMenu
DestroyIcon
GetWindowTextA
GetWindowLongA
PeekMessageA
wsprintfA
SetRect
IsMenu
MessageBoxA
IsMenu
DispatchMessageA
GetWindowLongA

dplayx

DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject

advapi32

IsValidAcl

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 793KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

376f38e4a0b8568c51f72d73b6ac47de

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

dplayx

advapi32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 793KB - Virtual size: 2.2MB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 793KB - Virtual size: 2.2MB