44ab8ce808ad4dafa9a5da4599751b134fd52013bbdb578b71b89048c7c1b899

Sharing

Copy URL Twitter E-mail

General

Target

44ab8ce808ad4dafa9a5da4599751b134fd52013bbdb578b71b89048c7c1b899
Size

184KB
MD5

d89131711aa3d8e680826ed4ae83912b
SHA1

e5b1ced77980def3f2b32872da9ae6f7451059ae
SHA256

44ab8ce808ad4dafa9a5da4599751b134fd52013bbdb578b71b89048c7c1b899
SHA512

7af588a3037471c5d9817a7165b9e66409a54b2d9b7776fd053b06698b320e6de48821488b1c5f2267b56c95ecd645feceb6a715f9b6d6ae987c34a42836515f
SSDEEP

3072:8tB1lMpiclI7HHNjZqOalbQRUXmjH0kBmxdHRXbRAg0FuwtcaLNjAZ:olMpicurNj0OKb6UXmzNg7xX1AOcBk

Score

N/A

Malware Config

Signatures

Files

44ab8ce808ad4dafa9a5da4599751b134fd52013bbdb578b71b89048c7c1b899
.dll windows x86

ae166ba3efd52240ed27cbec49a4bf83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
InitializeCriticalSection
CreateEventA
GetProcAddress
LoadLibraryA
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
GetProcessHeap
HeapFree
HeapSize
InterlockedCompareExchange
GetModuleHandleW
GetVersionExA
DeviceIoControl
FreeEnvironmentStringsA
FreeEnvironmentStringsW
lstrlenA
lstrlenW
GetEnvironmentStrings
GetEnvironmentStringsW
GetDiskFreeSpaceA
GlobalMemoryStatus
GetLocalTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
IsProcessorFeaturePresent
GetFullPathNameW
TlsSetValue
GetCommandLineA
GetCurrentDirectoryW
GetACP
GetOEMCP
CloseHandle
TlsFree
SetLastError
TlsGetValue
TlsAlloc
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
RtlUnwind
SetFilePointer
VirtualAlloc
GetDriveTypeA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
VirtualProtect
GetSystemInfo
VirtualQuery
RaiseException
WaitForSingleObject
SetEvent
MultiByteToWideChar
GetLastError
GetCPInfo
WideCharToMultiByte

advapi32

RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

ole32

CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2

Exports

Exports

CloseWMAFile
GetVersionNumber
IsFileDRMProtected
OpenWMAFile
ReadWMAFileStart
ResumeWMAFile
SetDRMUser
WMAGetID3TitleArtistString

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae166ba3efd52240ed27cbec49a4bf83

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 121KB

.rdata Size: 28KB - Virtual size: 25KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 864B

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 124KB - Virtual size: 121KB

.rdata
Size: 28KB - Virtual size: 25KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 864B

.reloc
Size: 12KB - Virtual size: 8KB