6de01201011b193c00921acfce90d31ea7b2180c14af37919b06bd3647e60219

Sharing

Copy URL Twitter E-mail

General

Target

6de01201011b193c00921acfce90d31ea7b2180c14af37919b06bd3647e60219
Size

449KB
MD5

6c6cedd92627605bfc4c89ec1ea96563
SHA1

8475e4734aeb94ad2eab24105bda2be955bbc73b
SHA256

6de01201011b193c00921acfce90d31ea7b2180c14af37919b06bd3647e60219
SHA512

a323928b7f1b38cee5fb487df87c495224985f0922959e16e97b2ecbf2736660143997966baf46895837ea289dcd8c26eba3b94fc1ecd3f3f12168126954da9f
SSDEEP

6144:/4yUW6ejdU6fkmf5jRr5NuDz9EqdvbbJrRXCNjhU037WSb25Culy7oCqARgy3OGF:/4ZB8eOkodHq9d+1U0rWSB7oCqB5O

Score

N/A

Malware Config

Signatures

Files

6de01201011b193c00921acfce90d31ea7b2180c14af37919b06bd3647e60219
.exe windows x86

d5b103666d647863a79fcf409c1a93ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
ShowWindow
EnumWindows
SendInput
LoadStringA
GetFocus
LoadIconA
FindWindowA

winmm

joyGetDevCapsA
midiDisconnect

msacm32

acmFormatSuggest
acmFormatTagDetailsW

kernel32

GetEnvironmentStringsW
CreateFileA
SetStdHandle
SetFilePointer
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
ExitProcess
SignalObjectAndWait
GetTickCount
Sleep
GetLastError
GetProcAddress
VirtualAlloc
LoadLibraryA
CloseHandle
GetSystemTime
ResumeThread
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
HeapSize
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 788KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5b103666d647863a79fcf409c1a93ae

Headers

DLL Characteristics

File Characteristics

Imports

user32

winmm

msacm32

kernel32

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 392KB - Virtual size: 788KB

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 392KB - Virtual size: 788KB