83c9e71b73b36380838378db628e93f5b076771704a5cecdcb59b111b957825c

Sharing

Copy URL Twitter E-mail

General

Target

83c9e71b73b36380838378db628e93f5b076771704a5cecdcb59b111b957825c
Size

136KB
MD5

34bba1a4a23cf4caef05afd1a5a35cc4
SHA1

2cb054c587b32370e937e0221b8fff1b89ed4751
SHA256

83c9e71b73b36380838378db628e93f5b076771704a5cecdcb59b111b957825c
SHA512

22b41019247e99c2607cd93cb685287f26e2320c21a060ef766b9f6c92997a9664db77a5c8132ae045a339d408dc233bd0126d6f87759c73aff971f62830cc55
SSDEEP

3072:MnLK6qYxwGAJfTQsJRgbWW1s1T1Nr+rT5uUlMSp5V:MnnqS+Bcs1xNr+rTFlMSnV

Score

N/A

Malware Config

Signatures

Files

83c9e71b73b36380838378db628e93f5b076771704a5cecdcb59b111b957825c
.exe windows x86

c0b0054e17a318dbf7afce19316f41ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ord520
ord309
ord514
ord832
ord871
ord518
ord232
ord849
ord365
ord329
ord901
ord606
ord425
ord428
ord868
ord125
ord327
ord233
ord888
ord176
ord259
ord777
ord510
ord330
ord424
ord344
ord702
ord422
ord512
ord577
ord581
ord240
ord247
ord234
ord571
ord401
ord824
ord833
ord48
ord106
ord468
ord926
ord932
ord906
ord935
ord469
ord941
ord450
ord217
ord576
ord590
ord236
ord397
ord388
ord557
ord558
ord508
ord367

user32

ord472
ord444
ord14
ord201
ord28
ord729
ord367
ord641
ord227
ord435
ord404
ord635
ord275
ord276
ord599
ord268
ord195
ord677
ord595
ord159
ord152
ord644
ord97
ord438
ord596
ord420
ord197
ord274
ord572
ord446
ord256
ord199
ord269
ord555
ord457
ord350
ord477
ord452
ord346

gdi32

ord141
ord81
ord437
ord567
ord585
ord571
ord406
ord46
ord144
ord525
ord584
ord45
ord589

comdlg32

ord110

shell32

ord273
ord313

avifil32

AVIStreamGetFrameOpen
AVIFileGetStream
AVIFileInit
AVIFileExit
AVIStreamSampleToTime
AVIStreamGetFrameClose
AVIFileRelease
AVIFileOpenA
AVIFileInfoA
AVIStreamRead
AVIStreamGetFrame
AVIStreamInfoA
AVIStreamReadFormat
AVIStreamTimeToSample
AVIStreamLength
AVIStreamStart

comctl32

ord17
ord22

msacm32

acmStreamUnprepareHeader
acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamClose
acmStreamConvert

winmm

ord67

encmpa

ord1
ord6
ord9
ord8
ord7
ord5
ord4
ord2
ord3

encodem1v

ord1
ord2
ord3

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmj
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c0b0054e17a318dbf7afce19316f41ff

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

avifil32

comctl32

msacm32

winmm

encmpa

encodem1v

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 76KB - Virtual size: 75KB

.pmj Size: - Virtual size: 4KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 76KB - Virtual size: 75KB

.pmj
Size: - Virtual size: 4KB