96ae0bbea1fc3ff364c969cb2bbe136de7c7404f4d46d3c91fc653520e9c8b5c

Sharing

Copy URL Twitter E-mail

General

Target

96ae0bbea1fc3ff364c969cb2bbe136de7c7404f4d46d3c91fc653520e9c8b5c
Size

1.1MB
MD5

aefef2aa66af304079741f7ebc7da918
SHA1

7ca8f889df9076492770f40dcd82b1e276d4cd78
SHA256

96ae0bbea1fc3ff364c969cb2bbe136de7c7404f4d46d3c91fc653520e9c8b5c
SHA512

a5a779ab8fddadb847b2666a9792f03b65c0b8b5044fe7083f406f86edd617c1a392d6fb99da70ac373dcc2f3f9b8ffffbd2c49656a7beca1547f3f63a1164f6
SSDEEP

12288:xazndMVZlbaX92v0Na5nHzEj8tM8JJkQlGD2veIngsirxC:xazndMV7gMIa5nTE4JJkQgceInQ

Score

N/A

Malware Config

Signatures

Files

96ae0bbea1fc3ff364c969cb2bbe136de7c7404f4d46d3c91fc653520e9c8b5c
.exe windows x86

c46d16678fe35a93f192b4293580ffa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
SetFilePointer
GetProcAddress
ReadFile
WriteFile
CloseHandle
GetLastError
HeapSize
GetCurrentProcess
TerminateProcess
RaiseException
LCMapStringW
LCMapStringA
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
CreateFileA
FlushFileBuffers
SetStdHandle
MultiByteToWideChar
IsBadWritePtr
HeapReAlloc
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
HeapAlloc
GetWindowsDirectoryA
HeapFree
ExitProcess
VirtualFree
GetVersion
HeapCreate
HeapDestroy
VirtualAlloc

user32

WaitMessage
ShowCursor
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
DestroyWindow
PostMessageA
PostQuitMessage
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
GetSystemMetrics
CreateWindowExA
MessageBoxA
ShowWindow
UpdateWindow
SetFocus

ddraw

DirectDrawCreate

dsound

ord1

winmm

timeKillEvent
timeGetDevCaps
timeSetEvent
timeBeginPeriod

fmod

_FSOUND_Init@12
_FSOUND_Stream_Play@8
_FSOUND_Stream_OpenFile@12
_FSOUND_Stream_Close@4
_FSOUND_Close@0

binkw32

_BinkClose@4
_BinkWait@4
_BinkOpenDirectSound@4
_BinkSetSoundSystem@8
_BinkNextFrame@4
_BinkDoFrame@4
_BinkCopyToBuffer@28
_BinkOpen@8
_BinkBufferOpen@16

Sections

.text
Size: 312KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

codeseg
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

datasg
Size: 4KB - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.STEntry
Size: 652KB - Virtual size: 651KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c46d16678fe35a93f192b4293580ffa8

Headers

File Characteristics

Imports

kernel32

user32

ddraw

dsound

winmm

fmod

binkw32

Sections

.text Size: 312KB - Virtual size: 309KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 24KB - Virtual size: 273KB

codeseg Size: 8KB - Virtual size: 7KB

datasg Size: 4KB - Virtual size: 34B

.rsrc Size: 4KB - Virtual size: 3KB

.STEntry Size: 652KB - Virtual size: 651KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 312KB - Virtual size: 309KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 24KB - Virtual size: 273KB

codeseg
Size: 8KB - Virtual size: 7KB

datasg
Size: 4KB - Virtual size: 34B

.rsrc
Size: 4KB - Virtual size: 3KB

.STEntry
Size: 652KB - Virtual size: 651KB

.rmnet
Size: 60KB - Virtual size: 60KB