9280f1b6e52ea642aaf4e2119b7243546157b8fe874a9d292e7d482eeeef5719

Sharing

Copy URL Twitter E-mail

General

Target

9280f1b6e52ea642aaf4e2119b7243546157b8fe874a9d292e7d482eeeef5719
Size

449KB
MD5

75187cd6d4ab48f3999427a6c1454987
SHA1

239baaba73e54da41464b2c855f68974e91f5c59
SHA256

9280f1b6e52ea642aaf4e2119b7243546157b8fe874a9d292e7d482eeeef5719
SHA512

91f2e40fcc2ed120b22476f9c4d403cebf6ae7f56cb0eebbfa259269061ea28eeadb12d2d01314accb724092ae1648ceb5250f1e368bddfedd6741248b6ad6f9
SSDEEP

6144:/T06ejdU6fkmf5jRr5NuDz9EqdvbbJrRXCNjhU037WSb25Culy7oCqARgy3OGeyH:/TT8eOkodHq9d+1U0rWSB7oCqB5O

Score

N/A

Malware Config

Signatures

Files

9280f1b6e52ea642aaf4e2119b7243546157b8fe874a9d292e7d482eeeef5719
.exe windows x86

d5b103666d647863a79fcf409c1a93ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
ShowWindow
EnumWindows
SendInput
LoadStringA
GetFocus
LoadIconA
FindWindowA

winmm

joyGetDevCapsA
midiDisconnect

msacm32

acmFormatSuggest
acmFormatTagDetailsW

kernel32

GetEnvironmentStringsW
CreateFileA
SetStdHandle
SetFilePointer
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
ExitProcess
SignalObjectAndWait
GetTickCount
Sleep
GetLastError
GetProcAddress
VirtualAlloc
LoadLibraryA
CloseHandle
GetSystemTime
ResumeThread
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
HeapSize
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 788KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5b103666d647863a79fcf409c1a93ae

Headers

DLL Characteristics

File Characteristics

Imports

user32

winmm

msacm32

kernel32

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 392KB - Virtual size: 788KB

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 392KB - Virtual size: 788KB