c6a34e511ed1c7bb2ecddfaaba00992d53006db3ed4b5ab3da61943b417227e8

Sharing

Copy URL

Twitter E-mail

General

Target

c6a34e511ed1c7bb2ecddfaaba00992d53006db3ed4b5ab3da61943b417227e8
Size

63KB
MD5

011065d74db969042661caa6bd32dfeb
SHA1

54dd609c92019db916f8c2fbdf4531f2a588338a
SHA256

c6a34e511ed1c7bb2ecddfaaba00992d53006db3ed4b5ab3da61943b417227e8
SHA512

f207a736cd8954f138e77b91fd0fbd00556ff62efbec099472a93476716643750ca434ebb1531a207d01a126124eba9493fb8b631627507bf9b4a4e45e640665
SSDEEP

768:CF3f1rpqH7qaa+eblzhxxVu2rIWuBcD8ANv7Gax2Q7Q/b9PV0sbM:C9fZp1z+WDu2rCgVyU2QG0s

Score

N/A

Malware Config

Signatures

Files

c6a34e511ed1c7bb2ecddfaaba00992d53006db3ed4b5ab3da61943b417227e8
.dll windows x86

4fa42eaed39d5231f70781bf942491ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreate

dsound

DirectSoundCreate

dinput

DirectInputCreateA

winmm

mciSendStringA
timeSetEvent
timeKillEvent

gdi32

SetTextColor
SelectObject
SetBkMode
CreateFontA
DeleteObject
TextOutA

user32

GetMessageA
SetWindowLongA
TranslateMessage
DispatchMessageA
DefWindowProcA

kernel32

GetVersion
GetStdHandle
GetFileType
CloseHandle
LCMapStringA
FlushFileBuffers
GetStringTypeA
GetStringTypeW
_lclose
_lread
_llseek
_lopen
GetDriveTypeA
HeapFree
HeapAlloc
GetCommandLineA
GetProcAddress
GetModuleHandleA
LCMapStringW
HeapCreate
HeapDestroy
LoadLibraryA
ExitProcess
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsW
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
WriteFile
GetEnvironmentStringsW
WideCharToMultiByte
DisableThreadLibraryCalls
GetLastError
SetFilePointer
SetStdHandle

Exports

Exports

CKey
ClrScr
DrawString
FlushDSound
GetKeyDefine
InitCD
InitDSound
InitInput
LoadDSound
PlayAvi
PlayDSound
ReadKey
ResetMode
SetMode
ShutDownInput
ShutdownDSound
StopApp
TimerProc
addtre
adpic
adpic0
arrayptr
cleartre
clripna
clsmen
copymen
corpate
cvlong
cvpate
delay1
exbb
exgm1
exgm2
exgop
exmap
exmyll
expate
exrij
extf
ffxy
fupate
getbin
intpate
killtimer
nipwa
nipwb
nipwseg
ntre
paksize
popscr
popscr6
popscr6a
popscrb
pushscr
putipna
putp
rblk
rhrff
rngput
rripa
rripafreeze
settimer
unpak
vmap
vwindow
wtime

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fa42eaed39d5231f70781bf942491ad

Headers

File Characteristics

Imports

ddraw

dsound

dinput

winmm

gdi32

user32

kernel32

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 37KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 17KB - Virtual size: 25KB

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 37KB - Virtual size: 37KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 17KB - Virtual size: 25KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB