ca9791afa06bc2cebb9521448ba4ae81cc536d6a0dfc6009ef7374b481c96b05

General

Target

ca9791afa06bc2cebb9521448ba4ae81cc536d6a0dfc6009ef7374b481c96b05
Size

296KB
MD5

44fdfdeeca10ec4dc4b503551e335bf0
SHA1

8929e4f3e7e1e24717f0752ef3b01674a6590b9a
SHA256

ca9791afa06bc2cebb9521448ba4ae81cc536d6a0dfc6009ef7374b481c96b05
SHA512

f3443263dbec93ad0477412aed25b4524359560e475006067e43d0dfaaa5d00557c67f49d2fe3223c8b665fd9b787fe28533c6843481aa28ceac6652bc95ea57
SSDEEP

6144:9bbnErVXrGpoOLO2iQBABlA4bCUAOhI8uAz:9PErV7GUE2BlLC8TPz

Score

N/A

Malware Config

Signatures

Files

ca9791afa06bc2cebb9521448ba4ae81cc536d6a0dfc6009ef7374b481c96b05
.exe windows x86

534483e577f2da71a284de986ff93840

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msdmo

MoCreateMediaType
MoFreeMediaType
MoInitMediaType
DMOEnum
MoDeleteMediaType
DMORegister
DMOUnregister

kernel32

GetCommandLineW
SetStdHandle
SetFilePointer
CloseHandle
GetOEMCP
GetACP
FlushFileBuffers
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
IsProcessorFeaturePresent
VirtualProtect
GetModuleHandleA
GetStartupInfoW
GetVersionExA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
GetProcAddress
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetLocaleInfoA
GetCPInfo
HeapAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
LoadLibraryA
HeapReAlloc
IsBadWritePtr
RtlUnwind
InterlockedExchange
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId

Exports

Exports

gamepart
watchPart

Sections

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 465KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

534483e577f2da71a284de986ff93840

Headers

File Characteristics

Imports

msdmo

kernel32

Exports

Exports

Sections

.text Size: 163KB - Virtual size: 162KB

.rdata Size: 56KB - Virtual size: 56KB

.data Size: 74KB - Virtual size: 465KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 163KB - Virtual size: 162KB

.rdata
Size: 56KB - Virtual size: 56KB

.data
Size: 74KB - Virtual size: 465KB

.rsrc
Size: 1KB - Virtual size: 1KB