d2fdbdbdb40b2b5d986b1a5d39313ca2a7edac16fbd05d4bf58985b8955cc777

Sharing

Copy URL Twitter E-mail

General

Target

d2fdbdbdb40b2b5d986b1a5d39313ca2a7edac16fbd05d4bf58985b8955cc777
Size

576KB
MD5

51ec638baed90c12e6be15b4ff0a9b50
SHA1

e757618968ff95eff0441a1444f47126d226adf3
SHA256

d2fdbdbdb40b2b5d986b1a5d39313ca2a7edac16fbd05d4bf58985b8955cc777
SHA512

fc86b262768cf2826a674ff36e89fb7a18a0329840b557c340250ca702bc89b3af1dd8f9dbfaba5d30cff69a35d7f0457a41a1b32b1c05c44b092f54a980ba7d
SSDEEP

12288:3ltt0oCGK37gQvJb4O8Q38LaKU3TgrCo8n:Vt26KEw18Q8ZU3TgWp

Score

N/A

Malware Config

Signatures

Files

d2fdbdbdb40b2b5d986b1a5d39313ca2a7edac16fbd05d4bf58985b8955cc777
.dll windows x86

361a6057f0634b3f6bc097e3cd9635ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
CreateEventA
CloseHandle
SetEvent
GetModuleHandleA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
ResumeThread
SetThreadPriority
GetVersionExA
OutputDebugStringA
GetTickCount
QueryPerformanceCounter
Sleep
CompareStringW
CompareStringA
SetEndOfFile
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
GetLocaleInfoA
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
GetDriveTypeA
GetFullPathNameA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetProcessHeap
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
RaiseException
HeapSize
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetFilePointer
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateDirectoryA

user32

RegisterClassA
DefWindowProcA
DestroyWindow
MsgWaitForMultipleObjects
MessageBoxA
CreateWindowExA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

winmm

waveOutUnprepareHeader
waveOutReset
waveOutWrite
waveOutPrepareHeader
waveOutClose
waveOutOpen

Exports

Exports

?createAudioRecorderDeviceList@irrklang@@YAPAVISoundDeviceList@1@W4E_SOUND_OUTPUT_DRIVER@1@PBD@Z
?createIrrKlangAudioRecorder@irrklang@@YAPAVIAudioRecorder@1@PAVISoundEngine@1@W4E_SOUND_OUTPUT_DRIVER@1@PBD2@Z
?createIrrKlangDevice@irrklang@@YAPAVISoundEngine@1@W4E_SOUND_OUTPUT_DRIVER@1@HPBD1@Z
?createSoundDeviceList@irrklang@@YAPAVISoundDeviceList@1@W4E_SOUND_OUTPUT_DRIVER@1@PBD@Z

Sections

.text
Size: 344KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

361a6057f0634b3f6bc097e3cd9635ca

Headers

File Characteristics

Imports

kernel32

user32

ole32

winmm

Exports

Exports

Sections

.text Size: 344KB - Virtual size: 341KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 76KB - Virtual size: 84KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 20KB - Virtual size: 17KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 344KB - Virtual size: 341KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 76KB - Virtual size: 84KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 20KB - Virtual size: 17KB

.rmnet
Size: 60KB - Virtual size: 60KB