0797af9afba8f92474dc9cc30c9401ce39733e15a3afe46b719672308ccca434

Sharing

Copy URL Twitter E-mail

General

Target

0797af9afba8f92474dc9cc30c9401ce39733e15a3afe46b719672308ccca434
Size

524KB
MD5

d8590e8e8fe67d275fb7f15835304c31
SHA1

289b5b84dc6a3b5322492fbc2d1ef027292895bc
SHA256

0797af9afba8f92474dc9cc30c9401ce39733e15a3afe46b719672308ccca434
SHA512

2aae2d0096b46e508e82d5d7b35b6d26276b25ef7a8fb0b98fd1f2fe5c285086b1f6b62b6b5ac46497ca1da2559d615af3a17b7ea456b201702f56613a754880
SSDEEP

12288:LLFxbZcpItpOp4+2nQAQFewAt0jGsVOReyaJk6CSQ:LLfb6pItpOa+wQAQFewAt0jGs0RhUktn

Score

N/A

Malware Config

Signatures

Files

0797af9afba8f92474dc9cc30c9401ce39733e15a3afe46b719672308ccca434
.exe windows x86

f1a031661aa56a9dca4f6af2452aebb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
GetVersionExA
GlobalUnlock
lstrcpyA
GlobalLock
GlobalAlloc
lstrlenA
HeapFree
HeapAlloc
MulDiv
CreateEventA
GetPrivateProfileStringA
WinExec
GlobalFree
GetFileSize
CompareStringW
CompareStringA
IsBadCodePtr
IsBadReadPtr
GetLocaleInfoA
FlushFileBuffers
InterlockedExchange
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetTimeZoneInformation
VirtualQuery
GetSystemInfo
VirtualProtect
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
HeapSize
LCMapStringW
GetVolumeInformationA
LCMapStringA
SetEndOfFile
SetStdHandle
GetStdHandle
SetHandleCount
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetCommandLineA
GetStartupInfoA
CreateThread
ResumeThread
ExitThread
GetLocalTime
HeapCompact
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapReAlloc
SetCurrentDirectoryA
SetEnvironmentVariableA
GetCPInfo
GetOEMCP
GetDriveTypeA
WaitForMultipleObjects
GetTickCount
FreeLibrary
LocalAlloc
LocalLock
LocalUnlock
LocalFree
WriteFile
OutputDebugStringA
CreateFileA
ReadFile
OpenMutexA
CloseHandle
CreateMutexA
InitializeCriticalSection
GetModuleFileNameA
ReleaseMutex
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetCurrentDirectoryA
GetTempPathA
GetACP
RaiseException
RtlUnwind
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetFileType
DeleteFileA
GetFileAttributesA
GetLongPathNameA
CreateDirectoryA
ResetEvent
Sleep
LeaveCriticalSection
EnterCriticalSection
GetLastError
ExitProcess
DeleteCriticalSection
WideCharToMultiByte

user32

LoadIconA
ReleaseDC
GetDC
MessageBoxA
FillRect
InvalidateRect
LoadMenuA
CreateWindowExA
GetForegroundWindow
GetAsyncKeyState
RegisterClassA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
DestroyWindow
InsertMenuItemA
GetSystemMetrics
AdjustWindowRect
DefWindowProcA
MoveWindow
UpdateWindow
ScrollDC
SetWindowLongA
PeekMessageA
LoadAcceleratorsA
CallWindowProcA
GetSubMenu
CreateDialogParamA
LoadImageA
CreateMenu
DeleteMenu
DrawMenuBar
GetMenu
SetWindowTextA
ClientToScreen
SetCursorPos
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetWindowRect
EnableWindow
GetDlgItem
EndDialog
SetFocus
LoadCursorA
ShowWindow
SendMessageA
SetCursor
GetCursorPos
ScreenToClient
PostMessageA
BeginPaint
EndPaint
KillTimer
SetTimer
DestroyMenu
ChangeDisplaySettingsA
PostQuitMessage
GetMessageA
SetMenu
GetWindowTextA
DialogBoxParamA
SetMenuItemInfoA
SetWindowPos
GetWindowLongA

gdi32

SetStretchBltMode
StretchBlt
SetTextColor
SetBkMode
SetBkColor
CreateFontA
TextOutA
CreateSolidBrush
CreateCompatibleDC
SelectObject
CreateDIBSection
GetDeviceCaps
BitBlt
GetStockObject
DeleteDC
DeleteObject
EnumFontFamiliesExA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

shell32

ShellExecuteA

ole32

CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

OleLoadPicture

avifil32

AVIStreamRelease
AVIFileOpenA
AVIFileCreateStreamA
AVIStreamSetFormat
AVIStreamWrite
AVIFileRelease

winmm

mixerGetLineControlsA
mixerGetLineInfoA
mixerClose
mixerGetDevCapsA
mciSendStringA
mciSendCommandA
timeGetTime
mciGetErrorStringA
mixerGetControlDetailsA
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
mixerSetControlDetails
mixerGetNumDevs
mixerOpen

dsound

ord1

msacm32

acmFormatSuggest
acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose

Exports

Exports

AllocDIB
BltBGTo
BltSpriteTo
DrawBG
DrawBG2
DrawClear
DrawFill
DrawSP
DrawSP2
FreeDIB
GetSpriteCellNum
GetSpriteDIB
GetSpriteData
NS2GetFile
NSAGetFile
NScrDoEvents
NScrExecWord
NScrGetDestDC
NScrGetFontType
NScrGetKey
NScrGetMouse
NScrGetSrcDC
NScrGetWindow
NScrGetWindowSize
NScrRefreshWindow
NScrSystemCall
NScrUpdateSrcDC
RenderSprite

Sections

.text
Size: 388KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f1a031661aa56a9dca4f6af2452aebb5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

avifil32

winmm

dsound

msacm32

Exports

Exports

Sections

.text Size: 388KB - Virtual size: 384KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 8KB - Virtual size: 3.4MB

.rsrc Size: 8KB - Virtual size: 6KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 388KB - Virtual size: 384KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 8KB - Virtual size: 3.4MB

.rsrc
Size: 8KB - Virtual size: 6KB

.rmnet
Size: 60KB - Virtual size: 60KB