0a3d3801b548243f6fe537cb74366d9eff53acdf015d1a467284d64e32a2f79b

General

Target

0a3d3801b548243f6fe537cb74366d9eff53acdf015d1a467284d64e32a2f79b
Size

323KB
MD5

0afcdeede8bd57a73106e1993cdfcda0
SHA1

092eb7b1ff7af2f597b118b1eea606faceeaa18a
SHA256

0a3d3801b548243f6fe537cb74366d9eff53acdf015d1a467284d64e32a2f79b
SHA512

85195efa9d6e17885a030653b6a003abc7c0dce122a6768de971e86999e9f5991d539d9cea5f1d13b135938a4f5a440bbe2d1dd853384e6fded2c3481340d717
SSDEEP

6144:KKOGVU/bYHEHAHL8cAvF97Buy1PBX51LetpO3F86MbJsIcQjGqQVvorRh:KKLsbYkvvF9lh7X51LetpO3WnbJpl4A1

Score

N/A

Malware Config

Signatures

Files

0a3d3801b548243f6fe537cb74366d9eff53acdf015d1a467284d64e32a2f79b
.dll windows x86

d3e1eb63b56b4d2a944e5d4667bc7aa4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcscat
wcslen
wcscpy
wcscmp
strrchr
strlen
strcpy
strcmp
strcat
sprintf
memset
memcpy
malloc
longjmp
log10
ispunct
fwrite
ftell
fseek
fopen
floor
fflush
fclose
ceil
_wfopen
_strupr
_stat
_sopen
_ismbcgraph
_errno
_beginthreadex
_adj_fdiv_m16i
__p__timezone
__p__commode
wcsrchr
__dllonexit

winmm

waveInGetID
mmioFlush

kernel32

VirtualAlloc
Sleep
SetThreadPriority
SetThreadAffinityMask
SetEvent
ResetEvent
QueryPerformanceCounter
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GetTickCount
GetThreadPriority
GetSystemTimeAsFileTime
GetSystemInfo
GetProcessPriorityBoost
GetProcessAffinityMask
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
ExitProcess
EnterCriticalSection
DeleteCriticalSection
CreateEventA
CloseHandle
WaitForSingleObject

Exports

Exports

CloseBlock
CreateEffect
DeletePage
GetIntegerv
GetSchemaObjectCount
MofEnumerateResourcesA
PlaneTransformArray
ServiceMain
mpegInGetLastErrString

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3e1eb63b56b4d2a944e5d4667bc7aa4

Headers

File Characteristics

Imports

msvcrt

winmm

kernel32

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 139KB - Virtual size: 139KB

.data Size: 67KB - Virtual size: 67KB

.rsrc Size: 45KB - Virtual size: 45KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 139KB - Virtual size: 139KB

.data
Size: 67KB - Virtual size: 67KB

.rsrc
Size: 45KB - Virtual size: 45KB

.reloc
Size: 4KB - Virtual size: 3KB