a70bd41b5268956ba5b894544d3793b78a71930cf003e35d3c2cc126ec2db111

Sharing

Copy URL Twitter E-mail

General

Target

a70bd41b5268956ba5b894544d3793b78a71930cf003e35d3c2cc126ec2db111
Size

5.3MB
MD5

e2a880c6c31b6024e897ead74e70d4aa
SHA1

e245b7b95a5a1e62c85715ce5d1dfe3e91456791
SHA256

a70bd41b5268956ba5b894544d3793b78a71930cf003e35d3c2cc126ec2db111
SHA512

f0a82eab2e8ae7d0c673c97c74c25d24036196424ead22d2142df2225b03aeb818231d408a093cad98f68334ca214b205f38e5e08a591b35918821a6c388e73f
SSDEEP

98304:rbdgp6kF3O7Q8vJ2lt19FNVdlmuWeGOiYDjvg1W:rbep6kY7IX

Score

N/A

Malware Config

Signatures

Files

a70bd41b5268956ba5b894544d3793b78a71930cf003e35d3c2cc126ec2db111
.exe windows x86

89a0f9cd6a7fa123bba8cfb11027694a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeBeginPeriod
timeEndPeriod
timeKillEvent
timeSetEvent
timeGetTime

dinput8

DirectInput8Create

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA
WriteFile
GetLastError
GetFileSize
MapViewOfFile
CreateFileMappingA
CreateFileA
CreateFileW
WideCharToMultiByte
GetVersionExA
UnmapViewOfFile
LockResource
LoadResource
SizeofResource
GetDriveTypeA
FindResourceW
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetStartupInfoA
ExitProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcmpiA
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
CloseHandle
CreateMutexA
GlobalMemoryStatus
Sleep
ExitThread
GetSystemTimeAsFileTime
SetFilePointer
GetFullPathNameA
FindResourceA
RemoveDirectoryA
lstrlenA
GetExitCodeThread
SetEvent
CreateThread
SetThreadPriorityBoost
PulseEvent
SuspendThread
GetCurrentThread
GetThreadPriority
SetThreadPriority
ResumeThread
QueryPerformanceFrequency
MultiByteToWideChar
ReadFile
lstrcpyA
lstrcatA
SystemTimeToFileTime
CopyFileA
WaitForSingleObject
ReleaseMutex
FindFirstFileA
FindNextFileA
FindClose
GetOverlappedResult
SetFileAttributesA
GetDiskFreeSpaceExA
GetLocalTime
DeleteFileA
OutputDebugStringA
GetThreadLocale
GetLocaleInfoA
CreateDirectoryA
GetACP
InterlockedExchange
FileTimeToSystemTime
FileTimeToLocalFileTime
CreateEventA
QueryPerformanceCounter

user32

LoadCursorA
PeekMessageA
TranslateMessage
wsprintfA
MessageBoxA
DispatchMessageA
UpdateWindow
ShowWindow
CreateWindowExA
DefWindowProcA
SendMessageA
PostQuitMessage
EndPaint
BeginPaint
RegisterClassExA

gdi32

DeleteObject

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

d3d8

Direct3DCreate8

dsound

ord11

binkw32

_BinkSetSoundOnOff@8
_BinkOpen@8
_BinkSetSoundTrack@8
_BinkSetSoundSystem@8
_BinkOpenDirectSound@4
_BinkClose@4
_BinkCopyToBuffer@28
_BinkNextFrame@4
_BinkDoFrame@4
_BinkWait@4
_BinkPause@8

msvcr70

wcslen
??_V@YAXPAX@Z
_stricmp
strncpy
strncmp
??1exception@@UAE@XZ
??0exception@@QAE@XZ
_strnicmp
??0exception@@QAE@ABV0@@Z
_CIasin
_aligned_malloc
_aligned_free
fputs
fprintf
strtoul
strtok
fgets
??_U@YAPAXI@Z
ceil
puts
iswascii
__security_error_handler
_c_exit
_exit
_XcptFilter
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
_except_handler3
_controlfp
strstr
_beginthread
qsort
strncat
fseek
ftell
srand
vsprintf
fread
fwrite
fclose
_finite
_ftol
isspace
isdigit
_setjmp3
longjmp
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
fopen
exit
malloc
free
sprintf
printf
_CIpow
_CIfmod
floor
_CIacos
calloc
_CxxThrowException

msvcp70

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

ole32

CoInitialize

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.6MB - Virtual size: 29.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

89a0f9cd6a7fa123bba8cfb11027694a

Headers

File Characteristics

Imports

winmm

dinput8

kernel32

user32

gdi32

advapi32

d3d8

dsound

binkw32

msvcr70

msvcp70

ole32

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 1.4MB - Virtual size: 1.4MB

.data Size: 1.6MB - Virtual size: 29.0MB

.idata Size: 8KB - Virtual size: 7KB

.data1 Size: 4KB - Virtual size: 2KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 1.6MB - Virtual size: 29.0MB

.idata
Size: 8KB - Virtual size: 7KB

.data1
Size: 4KB - Virtual size: 2KB

.rmnet
Size: 60KB - Virtual size: 60KB