a4a256c699b0fb9451e65466c9a310ab2f2d6aec8e914a3cbb4ad5321e9a42d2

Sharing

Copy URL Twitter E-mail

General

Target

a4a256c699b0fb9451e65466c9a310ab2f2d6aec8e914a3cbb4ad5321e9a42d2
Size

136KB
MD5

0070cc923323e8726976832092bc983b
SHA1

6ff0f86acd5019da3101458e4047a202612b4552
SHA256

a4a256c699b0fb9451e65466c9a310ab2f2d6aec8e914a3cbb4ad5321e9a42d2
SHA512

978f1e71dc0cbcd78eba0d2a9d462544c5478a07eb138f62ea4fef1f1463a3f464febb050b08107e4e1fca3857474a239d85d5e7d40769a55352da9751c6f14a
SSDEEP

3072:7RLK6qYxwGAJfRQsJRgbWW1s1T1Nr+rT5uUlMSp5V:7RnqS+7cs1xNr+rTFlMSnV

Score

N/A

Malware Config

Signatures

Files

a4a256c699b0fb9451e65466c9a310ab2f2d6aec8e914a3cbb4ad5321e9a42d2
.exe windows x86

f87ed51a1ecdc7a9a8339b3b4ee5aac9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ord527
ord316
ord521
ord839
ord878
ord525
ord239
ord856
ord372
ord336
ord908
ord613
ord432
ord435
ord875
ord130
ord334
ord240
ord895
ord183
ord266
ord784
ord517
ord337
ord431
ord351
ord709
ord429
ord519
ord584
ord588
ord247
ord254
ord241
ord578
ord408
ord831
ord840
ord50
ord109
ord475
ord933
ord939
ord913
ord942
ord476
ord948
ord457
ord224
ord583
ord597
ord243
ord404
ord395
ord564
ord565
ord515
ord374

user32

ord472
ord444
ord14
ord201
ord28
ord729
ord367
ord641
ord227
ord435
ord404
ord635
ord275
ord276
ord599
ord268
ord195
ord677
ord595
ord159
ord152
ord644
ord97
ord438
ord596
ord420
ord197
ord274
ord572
ord446
ord256
ord199
ord269
ord555
ord457
ord350
ord477
ord452
ord346

gdi32

ord141
ord81
ord437
ord569
ord587
ord573
ord406
ord46
ord144
ord527
ord586
ord45
ord591

comdlg32

ord110

shell32

ord273
ord313

avifil32

AVIStreamGetFrameOpen
AVIFileGetStream
AVIFileInit
AVIFileExit
AVIStreamSampleToTime
AVIStreamGetFrameClose
AVIFileRelease
AVIFileOpenA
AVIFileInfoA
AVIStreamRead
AVIStreamGetFrame
AVIStreamInfoA
AVIStreamReadFormat
AVIStreamTimeToSample
AVIStreamLength
AVIStreamStart

comctl32

ord17
ord22

msacm32

acmStreamUnprepareHeader
acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamClose
acmStreamConvert

winmm

ord67

encmpa

ord1
ord6
ord9
ord8
ord7
ord5
ord4
ord2
ord3

encodem1v

ord1
ord2
ord3

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f87ed51a1ecdc7a9a8339b3b4ee5aac9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

avifil32

comctl32

msacm32

winmm

encmpa

encodem1v

Sections

.text Size: 40KB - Virtual size: 40KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 76KB - Virtual size: 96KB

.text
Size: 40KB - Virtual size: 40KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 76KB - Virtual size: 96KB