08c86809f3ee4f9867b8762b247ae8857b75a89cb7b2d5b758d7414f60cf0dd6

General

Target

08c86809f3ee4f9867b8762b247ae8857b75a89cb7b2d5b758d7414f60cf0dd6
Size

464KB
MD5

eb55692470aa2ba1e8cf5106365eb530
SHA1

db5266d8a9b6b3f0ff46196aad1057c801a3b065
SHA256

08c86809f3ee4f9867b8762b247ae8857b75a89cb7b2d5b758d7414f60cf0dd6
SHA512

0ba213be251cdf65fb439988d8637aaa0c9265382541449f2385e687585ff321318424945ef45c364d4436069fd479caec7bcdd9ae886b38c5669b0391262795
SSDEEP

3072:voKaIoiG5YrrILbGRAEXgYmyBuY2/rWWmu0ZcjQrtdqhR18LQ9ovrfG:wKaQG56rmb4jJmyv2TW+IcjQyN8xfG

Score

N/A

Malware Config

Signatures

Files

08c86809f3ee4f9867b8762b247ae8857b75a89cb7b2d5b758d7414f60cf0dd6
.dll windows x86

0ab301259bff320d1f49140c01841fdf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
CreateThread
CloseHandle
TerminateThread
WaitForSingleObject
Sleep
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetLastError
CreateFileA
GetFileType
ReadFile
GetStdHandle
SetFilePointer
GetFileSize
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
InterlockedDecrement
InterlockedIncrement
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetProcAddress
GetModuleHandleA
SetHandleCount
SetThreadPriority
DeleteCriticalSection
GetModuleFileNameA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
SetUnhandledExceptionFilter
MultiByteToWideChar
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetStdHandle

user32

MessageBoxA
PostMessageA

Exports

Exports

winampGetInModule2

Sections

.text
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ab301259bff320d1f49140c01841fdf

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 416KB - Virtual size: 416KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 24KB - Virtual size: 50KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 416KB - Virtual size: 416KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 24KB - Virtual size: 50KB

.reloc
Size: 8KB - Virtual size: 7KB