1cef9f498cfa10d85e555c6ba1a4820ff95fa37bd6bd044cf2342a68df422a73

Sharing

Copy URL Twitter E-mail

General

Target

1cef9f498cfa10d85e555c6ba1a4820ff95fa37bd6bd044cf2342a68df422a73
Size

216KB
MD5

49bf6c9be922defaf35925be61209ecb
SHA1

c2d6fa3815a7f8316019839dc594c4c07d443270
SHA256

1cef9f498cfa10d85e555c6ba1a4820ff95fa37bd6bd044cf2342a68df422a73
SHA512

1ad22c5a1763b6c6600aa37b4f519617b74b46431da2d881eaea0a90ac7e1494b8a4545c7ab32fa60a01b17e6908160f22dc06fb0fb12845dc45662f6aeb019f
SSDEEP

3072:lAuS3/hiI8iO2zPDbTzhA8UFbBM7mIR+olIRTKcIrLrfgG68dMo8Z2f:quVIHzPDadxBcBIBJG68PS2f

Score

N/A

Malware Config

Signatures

Files

1cef9f498cfa10d85e555c6ba1a4820ff95fa37bd6bd044cf2342a68df422a73
.dll windows x86

f0ac2d5429f14998deb84e9eb8f7b668

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadWritePtr
GetProcAddress
LoadLibraryA
FreeLibrary
RtlUnwind
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
RaiseException
WriteFile
GetEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
CloseHandle
CreateThread
CreateEventA
InitializeCriticalSection
SetEvent
DeleteCriticalSection
WaitForSingleObjectEx
Sleep
ExitThread
HeapAlloc
HeapFree
HeapReAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings

winmm

waveOutWrite
waveOutUnprepareHeader
waveOutClose
timeSetEvent
waveOutPrepareHeader
timeKillEvent
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
waveOutOpen
waveOutReset
timeGetTime

user32

PostThreadMessageA
GetForegroundWindow
GetMessageA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Exports

Exports

EAXGet
EAXSet
alBufferData
alDeleteBuffers
alDeleteSources
alDisable
alDistanceModel
alDopplerFactor
alDopplerVelocity
alEAXAC3GetFunctionTable
alEnable
alGenBuffers
alGenSources
alGetBoolean
alGetBooleanv
alGetBufferf
alGetBufferi
alGetDouble
alGetDoublev
alGetEnumValue
alGetError
alGetFloat
alGetFloatv
alGetInteger
alGetIntegerv
alGetListener3f
alGetListenerf
alGetListenerfv
alGetListeneri
alGetProcAddress
alGetSource3f
alGetSourcef
alGetSourcefv
alGetSourcei
alGetString
alIsBuffer
alIsEnabled
alIsExtensionPresent
alIsSource
alListener3f
alListenerf
alListenerfv
alListeneri
alSource3f
alSourcePause
alSourcePausev
alSourcePlay
alSourcePlayv
alSourceQueueBuffers
alSourceRewind
alSourceRewindv
alSourceStop
alSourceStopv
alSourceUnqueueBuffers
alSourcef
alSourcefv
alSourcei
alcCloseDevice
alcCreateContext
alcDestroyContext
alcGetContextsDevice
alcGetCurrentContext
alcGetEnumValue
alcGetError
alcGetIntegerv
alcGetProcAddress
alcGetString
alcIsExtensionPresent
alcMakeContextCurrent
alcOpenDevice
alcProcessContext
alcSuspendContext

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f0ac2d5429f14998deb84e9eb8f7b668

Headers

File Characteristics

Imports

kernel32

winmm

user32

ole32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 111KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 20KB - Virtual size: 768KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 6KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 112KB - Virtual size: 111KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 20KB - Virtual size: 768KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 6KB

.rmnet
Size: 60KB - Virtual size: 60KB