b5391f7f912e3ce4e8d26744d03dcc93a0221f645b85fd6ad8d50859fd927986

Sharing

Copy URL Twitter E-mail

General

Target

b5391f7f912e3ce4e8d26744d03dcc93a0221f645b85fd6ad8d50859fd927986
Size

122KB
MD5

3eb0ac8a5090c63cbbc3ac2facdc02f4
SHA1

46915658d38e3e32911f3b5d726ce24cb04a5127
SHA256

b5391f7f912e3ce4e8d26744d03dcc93a0221f645b85fd6ad8d50859fd927986
SHA512

d68f619c652f88b430d57cf8f311aae1d6b15674a5cfe30ac1f8a5579a29b914ac3d0fa97f1fd01604714c074b9daa453451b99fa22750f33f6ded55d9c750c6
SSDEEP

3072:UpN3xV+0tvsELJW++mEocXZgB4CpssM1SJ:Gfwfg1sPu

Score

N/A

Malware Config

Signatures

Files

b5391f7f912e3ce4e8d26744d03dcc93a0221f645b85fd6ad8d50859fd927986
.exe windows x86

1e1a2919b1d2caf88d0b7514b4a54910

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
GetCurrencyFormatW
GlobalFree
EnumDateFormatsA
GetNumberFormatW
CreateToolhelp32Snapshot
TlsSetValue
GetCurrentThread
EndUpdateResourceW
OpenFileMappingW
GetConsoleHardwareState
GetACP
SetConsoleLocalEUDC
CompareStringW
GetConsoleTitleW
FlushFileBuffers
GetNumberFormatA
GetThreadSelectorEntry
MoveFileA
GetLocaleInfoW
OutputDebugStringA
OpenFile
FileTimeToSystemTime
FoldStringA
GetUserDefaultUILanguage
EnumResourceLanguagesA
GetConsoleScreenBufferInfo
Heap32First
GetConsoleTitleA
Process32FirstW
VirtualAlloc
GetCommandLineW
SetConsoleCursor
DeleteFileA
CreateMailslotW
HeapSetInformation
ReleaseSemaphore
BuildCommDCBA
GetFileAttributesW
ReadConsoleOutputCharacterW
_lwrite
LoadLibraryExW
Module32FirstW
EnumSystemLanguageGroupsW
GetConsoleAliasesW
CreateDirectoryExW
ProcessIdToSessionId
RegisterConsoleOS2
ExitProcess
SetProcessShutdownParameters
FindFirstChangeNotificationA
InterlockedDecrement
CreateProcessW
LoadLibraryA
CreateTimerQueue
lstrcat
GetProcAddress
VirtualProtect

ddraw

GetSurfaceFromDC
DllCanUnloadNow
D3DParseUnknownCommand
DirectDrawCreate
DirectDrawEnumerateExW
DDInternalLock
GetOLEThunkData
DirectDrawCreateEx
AcquireDDThreadLock
RegisterSpecialCase
DDInternalUnlock
ReleaseDDThreadLock
DSoundHelp
DirectDrawEnumerateA
DDGetAttachedSurfaceLcl
DirectDrawEnumerateW
CompleteCreateSysmemSurface
DirectDrawCreateClipper
DirectDrawEnumerateExA
GetDDSurfaceLocal
DllGetClassObject

tapi32

phoneSetVolume
MMCAddProvider

Sections

.data
Size: - Virtual size: 496KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1e1a2919b1d2caf88d0b7514b4a54910

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ddraw

tapi32

Sections

.data Size: - Virtual size: 496KB

.text Size: 31KB - Virtual size: 30KB

.reloc Size: 512B - Virtual size: 24B

.rsrc Size: 51KB - Virtual size: 50KB

.rdata Size: 38KB - Virtual size: 38KB

.data
Size: - Virtual size: 496KB

.text
Size: 31KB - Virtual size: 30KB

.reloc
Size: 512B - Virtual size: 24B

.rsrc
Size: 51KB - Virtual size: 50KB

.rdata
Size: 38KB - Virtual size: 38KB