cbacf28b457da951f5ce0a81066aa0cb1911ff1c706304f03ef742ce1d43a3bf

Sharing

Copy URL Twitter E-mail

General

Target

cbacf28b457da951f5ce0a81066aa0cb1911ff1c706304f03ef742ce1d43a3bf
Size

147KB
MD5

3bcca80a1ea95a8f3e03bae5e1a06613
SHA1

5bc8438b5a0933ab5274ae89575a6f003bdbe7d9
SHA256

cbacf28b457da951f5ce0a81066aa0cb1911ff1c706304f03ef742ce1d43a3bf
SHA512

319702878f93836a673b5088ceb0d9901f4f1a0830ea3773f057567d51bf2b8eca18f47c451731709872236908c6148783a5526a97a1079769d903335a1a3342
SSDEEP

3072:yuUjC52oIRiO7Uji4Krdk6wK6dBCYwsQs7n8poCALdzNk:4jCSRiO7UG4KrW6wK6KYv17n8poCgNk

Score

N/A

Malware Config

Signatures

Files

cbacf28b457da951f5ce0a81066aa0cb1911ff1c706304f03ef742ce1d43a3bf
.exe windows x86

f246da2933278ce2db94f3821008f8ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
GetModuleFileNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
Sleep
QueryPerformanceCounter
QueryPerformanceFrequency
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InterlockedCompareExchange

fmodexl

?setSpeakerMode@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKERMODE@@@Z
?setHardwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@HHHH@Z
?setRecordDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_OUTPUTTYPE@@@Z
?set3DSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z

fmod_eventl

?EventSystem_Create@FMOD@@YG?AW4FMOD_RESULT@@PAPAVEventSystem@1@@Z
?setValue@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?getParameter@Event@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVEventParameter@2@@Z
?set3DAttributes@Event@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@00@Z
?setVolume@Event@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setPaused@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?stop@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?start@Event@FMOD@@QAG?AW4FMOD_RESULT@@XZ

msvcr80

memcpy
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z
puts
abort
??_V@YAXPAX@Z
printf
exit
sprintf
fputs
fflush
fclose
fopen
sprintf_s
sscanf
fgets
fprintf
_purecall
ftell
fseek
strncmp
isspace
strchr
isalnum
tolower
strncpy
isalpha
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
__CxxFrameHandler3

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f246da2933278ce2db94f3821008f8ae

Headers

File Characteristics

Imports

kernel32

fmodexl

fmod_eventl

msvcr80

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 100KB - Virtual size: 100KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 100KB - Virtual size: 100KB