5e280e8f7bc135b184a7e2ecd850e1ab9af6587bad1a588a3e1e01ea3efbaed9

Sharing

Copy URL Twitter E-mail

General

Target

5e280e8f7bc135b184a7e2ecd850e1ab9af6587bad1a588a3e1e01ea3efbaed9
Size

228KB
MD5

79f967bc0c37970f99083c82d06d0ce0
SHA1

97e3a6c482234d538b7d5a5bcd7c2e828126528e
SHA256

5e280e8f7bc135b184a7e2ecd850e1ab9af6587bad1a588a3e1e01ea3efbaed9
SHA512

37fae1285981f552e46ccd5c3ccd4b42ae65a57474dd8f62c182e018343ad8931e1fe312b45debf73a4f59854b3ae83c0e9d6d1b3ac69882aa5628844ae7db6b
SSDEEP

1536:exmO+dUW2xmnPl2sFEFCLAOgGyzdfS5c:VO+hQmPlJXLAOgGQdq5

Score

N/A

Malware Config

Signatures

Files

5e280e8f7bc135b184a7e2ecd850e1ab9af6587bad1a588a3e1e01ea3efbaed9
.dll windows x86

1517e3edca20d604a2278e8d7ae59528

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

drputility

?Copy@DrpMemory@@SAPAXPAXIPBXI@Z
?AddRef@CDrpFile@@UAEXXZ
?Release@CDrpFile@@UAEXXZ
?GetFileSize@CDrpFile@@UAE_JXZ
?Read@CDrpFile@@UAEKPAXKPAKPA_NK_J@Z
?Write@CDrpFile@@UAEKPAXKPAK@Z
?Seek@CDrpFile@@UAEKK_J@Z
?SeekToBegin@CDrpFile@@UAEKXZ
??0DrpMemory@@QAE@XZ
?SeekToEnd@CDrpFile@@UAEKXZ
?GetCurrentPosition@CDrpFile@@UAE_JXZ
?Initialize@DrpMemory@@QAE_NPAPAXII@Z
?IsEOF@CDrpFile@@UAE_NXZ
??1DrpMemory@@UAE@XZ
?GetFileName@CDrpFile@@UAEPB_WXZ
??0CDrpFile@@QAE@PB_WIPAUDRP_OPEN_MODE@@@Z
?GetError@CDrpFile@@UAEKXZ
?OpenFile@CDrpFile@@UAEKXZ
?GetBuffer@DrpMemory@@QAEPAXXZ
?CloseFile@CDrpFile@@UAEXXZ
??1CDrpFile@@UAE@XZ
?IsFileOpened@CDrpFile@@UAE_NXZ
?ReleaseBuffer@DrpMemory@@QAEXXZ

kernel32

GetModuleFileNameW
LoadLibraryExW
FreeLibrary
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcp80

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcr80

memchr
realloc
memmove_s
??_V@YAXPAX@Z
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_snwprintf_s
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
??2@YAPAXI@Z
memset
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
wcsrchr
wcsncpy_s
??0exception@std@@QAE@ABV01@@Z
_crt_debugger_hook
memcpy_s
_CxxThrowException

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z
DrpCreateSoundEngine

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1517e3edca20d604a2278e8d7ae59528

Headers

File Characteristics

Imports

drputility

kernel32

msvcp80

msvcr80

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 176KB - Virtual size: 174KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 176KB - Virtual size: 174KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB