3c845f483c4acde9a3ce732c71b46a33705175f031c1a52f99f8d6fc433388f8

Sharing

Copy URL Twitter E-mail

General

Target

3c845f483c4acde9a3ce732c71b46a33705175f031c1a52f99f8d6fc433388f8
Size

523KB
MD5

9bb207dc175d9040dee196f63642046f
SHA1

d852ce9d75306fbf00511962687778d346ca02e6
SHA256

3c845f483c4acde9a3ce732c71b46a33705175f031c1a52f99f8d6fc433388f8
SHA512

e889f65c2d7e7b1fefb2d91e9149a9a4e6f2d5be7c8eea02c79964d624d5cca9f509ce05f2c49a6ffbbf683a02b2222d8a82ea38e1b8bc7626bf70006895715b
SSDEEP

12288:jWb6TSJ5tqz4mRhg2OYSfgEmPEqd75Klqt3o:jWXLK4m5OYSfg6mOq

Score

N/A

Malware Config

Signatures

Files

3c845f483c4acde9a3ce732c71b46a33705175f031c1a52f99f8d6fc433388f8
.dll windows x86

40f75acf6b468628f9954dd582953ce4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
HeapDestroy
HeapAlloc
ReadFile
HeapFree
DuplicateHandle
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
SetThreadPriority
SetPriorityClass
GetThreadPriority
GetPriorityClass
GetCurrentProcessId
GetCurrentThread
DeviceIoControl
ReleaseMutex
SetEvent
WaitForSingleObject
UnmapViewOfFile
OpenMutexA
MapViewOfFile
CreateFileMappingA
CreateEventA
lstrcpyA
CreateProcessA
OpenEventA
SetLastError
GetWindowsDirectoryA
FindResourceA
CreateMutexA
DisableThreadLibraryCalls
GetCurrentThreadId
GetVersionExA
OpenVxDHandle
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetFileSize
SetFilePointer
CreateThread
ResetEvent
OpenProcess
GetExitCodeThread
GetSystemDirectoryA
GetOverlappedResult
GetTickCount
ConvertToGlobalHandle
WaitForMultipleObjects
OpenFileMappingA
GetPrivateProfileStringA
RtlUnwind
RaiseException
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
LCMapStringA
LCMapStringW
ExitProcess
TerminateProcess
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetStdHandle
OutputDebugStringA
GetVersion
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
SetConsoleCtrlHandler
GetModuleFileNameW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetEnvironmentVariableA
VirtualFree
VirtualAlloc
HeapReAlloc
FlushFileBuffers
GetCommandLineA
GetFullPathNameA
CreateFileA
GetModuleHandleA
GetModuleFileNameA
CloseHandle
InterlockedDecrement
InterlockedIncrement
GetStartupInfoW

user32

EnumWindows
GetWindowThreadProcessId
LoadStringA
IsWindow
GetForegroundWindow
GetParent
wsprintfA
CharUpperA
CharLowerBuffA
GetWindowPlacement

advapi32

RegCreateKeyA
RegOpenKeyExA
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExA
RegSetValueExA
RegSetValueExW
RegCloseKey

rpcrt4

UuidFromStringA

ole32

CoCreateInstance

winmm

waveInUnprepareHeader
waveOutUnprepareHeader
waveOutGetDevCapsA
waveInGetDevCapsA
waveOutGetVolume
waveOutSetVolume
waveOutMessage
waveInMessage
waveOutGetNumDevs
waveInGetNumDevs
waveOutOpen
waveOutClose
waveInOpen
waveInClose
mmioOpenA
waveOutGetPosition
waveInStop
waveInReset
waveInGetPosition
waveInAddBuffer
waveInPrepareHeader
waveInStart
mixerGetLineControlsA
waveOutReset
waveOutRestart
waveOutPause
waveOutWrite
waveOutPrepareHeader
timeGetTime
timeBeginPeriod
mixerClose
mixerGetControlDetailsA
timeEndPeriod
mixerGetLineInfoA
mixerOpen
mixerSetControlDetails

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

DirectSoundCaptureCreate
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCreate8
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DllCanUnloadNow
DllGetClassObject
GetDeviceID

Sections

.text
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 435B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40f75acf6b468628f9954dd582953ce4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

rpcrt4

ole32

winmm

version

Exports

Exports

Sections

.text Size: 408KB - Virtual size: 407KB

.data Size: 18KB - Virtual size: 24KB

.edata Size: 512B - Virtual size: 435B

.xdata Size: 61KB - Virtual size: 60KB

.rsrc Size: 19KB - Virtual size: 20KB

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 408KB - Virtual size: 407KB

.data
Size: 18KB - Virtual size: 24KB

.edata
Size: 512B - Virtual size: 435B

.xdata
Size: 61KB - Virtual size: 60KB

.rsrc
Size: 19KB - Virtual size: 20KB

.reloc
Size: 15KB - Virtual size: 14KB