39e372ffa3b3e3a1718885128448432f934a23d6d76949964a1e72bc0b0c2c98

Sharing

Copy URL Twitter E-mail

General

Target

39e372ffa3b3e3a1718885128448432f934a23d6d76949964a1e72bc0b0c2c98
Size

88KB
MD5

2bef628ea2f3bf7ada5e2579001ee09b
SHA1

fb14d8f1b21500f00683c1b7741d2585aec2bf70
SHA256

39e372ffa3b3e3a1718885128448432f934a23d6d76949964a1e72bc0b0c2c98
SHA512

93e725fe89740a73938bfa94696a25cb9c4078c77cec58a661221fd82051c9fdd29fc29007fd76d86c6134d9d89ba0641c7df07ad7e84e67d0f94d3dc1625f13
SSDEEP

1536:jj1AYT3dAlTYBUsjeRNEtciEyplqFqx9pOgyzsQyLGQGVuzDmKIW9b:jj1ThAlTUUPRCtciBplqFqx9ZMsQimKZ

Score

N/A

Malware Config

Signatures

Files

39e372ffa3b3e3a1718885128448432f934a23d6d76949964a1e72bc0b0c2c98
.exe windows x64

0e51933ab647591cd4fe4cbc792e52b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapSize
IsValidCodePage
LCMapStringW
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcess
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
EnterCriticalSection
MultiByteToWideChar
GetStringTypeW
HeapAlloc
ExitProcess
LoadLibraryW
VirtualAllocEx
Sleep
GetProcAddress
HeapFree
GetModuleHandleA
GetCommandLineA
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
GetLastError
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
HeapReAlloc

avifil32

EditStreamSetNameA
EditStreamSetInfoW
AVIClearClipboard
AVIFileInfoW
AVIFileOpenA
AVIStreamTimeToSample
AVIBuildFilterW
AVIStreamBeginStreaming

msvfw32

DrawDibSetPalette
ICGetDisplayFormat
DrawDibGetBuffer
ICOpen
ord2
ICCompressorChoose

avicap32

capCreateCaptureWindowW

wsnmp32

ord905
ord501
ord302
ord107
ord100
ord603
ord500
ord220
ord904
ord604
ord903
ord502
ord206

comdlg32

PageSetupDlgW
ChooseFontW
ChooseColorA
FindTextA
FindTextW
CommDlgExtendedError
ReplaceTextW
ChooseColorW
ChooseFontA
GetOpenFileNameA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0e51933ab647591cd4fe4cbc792e52b8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

avifil32

msvfw32

avicap32

wsnmp32

comdlg32

Sections

.text Size: 33KB - Virtual size: 32KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 184KB

.pdata Size: 1KB - Virtual size: 1KB

.text Size: 37KB - Virtual size: 36KB

.text
Size: 33KB - Virtual size: 32KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 184KB

.pdata
Size: 1KB - Virtual size: 1KB

.text
Size: 37KB - Virtual size: 36KB