7882cb1d518188e20c05900763a971a3988b6e93e8312a52bb9cb5e07b78d7ed

Sharing

Copy URL Twitter E-mail

General

Target

7882cb1d518188e20c05900763a971a3988b6e93e8312a52bb9cb5e07b78d7ed
Size

136KB
MD5

db71ef1b40359dc292994db7628e13b5
SHA1

33f39bc68527d14ff5352f0b79db6af8bd636a7b
SHA256

7882cb1d518188e20c05900763a971a3988b6e93e8312a52bb9cb5e07b78d7ed
SHA512

e1d9a2b8384c3a6f757180cdc85bf9d68fcdc3d04efd45c4a4ea029215fcc3324c6d5b31a30866567ff80b92d9cea6456d91bbcefe4c7e3273cc6756aa4918b7
SSDEEP

3072:MhLK6qYxwGAJfTQsJRgbWW1s1T1Nr+rT5uUlMSp5V:MhnqS+Bcs1xNr+rTFlMSnV

Score

N/A

Malware Config

Signatures

Files

7882cb1d518188e20c05900763a971a3988b6e93e8312a52bb9cb5e07b78d7ed
.exe windows x86

c0b0054e17a318dbf7afce19316f41ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ord520
ord309
ord514
ord832
ord871
ord518
ord232
ord849
ord365
ord329
ord901
ord606
ord425
ord428
ord868
ord125
ord327
ord233
ord888
ord176
ord259
ord777
ord510
ord330
ord424
ord344
ord702
ord422
ord512
ord577
ord581
ord240
ord247
ord234
ord571
ord401
ord824
ord833
ord48
ord106
ord468
ord926
ord932
ord906
ord935
ord469
ord941
ord450
ord217
ord576
ord590
ord236
ord397
ord388
ord557
ord558
ord508
ord367

user32

ord472
ord444
ord14
ord201
ord28
ord729
ord367
ord641
ord227
ord435
ord404
ord635
ord275
ord276
ord599
ord268
ord195
ord677
ord595
ord159
ord152
ord644
ord97
ord438
ord596
ord420
ord197
ord274
ord572
ord446
ord256
ord199
ord269
ord555
ord457
ord350
ord477
ord452
ord346

gdi32

ord141
ord81
ord437
ord567
ord585
ord571
ord406
ord46
ord144
ord525
ord584
ord45
ord589

comdlg32

ord110

shell32

ord273
ord313

avifil32

AVIStreamGetFrameOpen
AVIFileGetStream
AVIFileInit
AVIFileExit
AVIStreamSampleToTime
AVIStreamGetFrameClose
AVIFileRelease
AVIFileOpenA
AVIFileInfoA
AVIStreamRead
AVIStreamGetFrame
AVIStreamInfoA
AVIStreamReadFormat
AVIStreamTimeToSample
AVIStreamLength
AVIStreamStart

comctl32

ord17
ord22

msacm32

acmStreamUnprepareHeader
acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamClose
acmStreamConvert

winmm

ord67

encmpa

ord1
ord6
ord9
ord8
ord7
ord5
ord4
ord2
ord3

encodem1v

ord1
ord2
ord3

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c0b0054e17a318dbf7afce19316f41ff

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

avifil32

comctl32

msacm32

winmm

encmpa

encodem1v

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 76KB - Virtual size: 92KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 76KB - Virtual size: 92KB