1639cede50600d3205a15d664bf7621c7fc47d993e58ed99fd7b33e25fb2c06a

Sharing

Copy URL

Twitter E-mail

General

Target

1639cede50600d3205a15d664bf7621c7fc47d993e58ed99fd7b33e25fb2c06a
Size

2.9MB
MD5

08a78766616c518b63a832215b0f0973
SHA1

7a630f89452b1a072872e06079ecc0c43d51f006
SHA256

1639cede50600d3205a15d664bf7621c7fc47d993e58ed99fd7b33e25fb2c06a
SHA512

544a80e569dec60d13f9ec6cbee0aec7b9fcde3b95f77888ce207ffbf36813197d6d2f2dcab8e14d1f2a3d5dd0937a9ca9b552051db1425f077b47f6c6d7e301
SSDEEP

49152:bBjXskXXzhdDRXZLHhSsrxSXOD+9y4vBCz+Zn/1X6xp0+YgGz4TYUPp7wHfe3GMd:Nj8kXXzhpF5HhSsrxSXh9y4vBAen/1Xm

Score

N/A

Malware Config

Signatures

Files

1639cede50600d3205a15d664bf7621c7fc47d993e58ed99fd7b33e25fb2c06a
.dll windows x86

8f787730bd1c0ace1216e4adf5cb09da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ace

ord3
ord2
ord4

agm

ord4
ord3

bib

ord5
ord4
ord11

cooltype

ord3
ord1

winmm

mmioSetInfo
mmioSeek
mmioDescend
mmioRead
mmioOpenA
mmioAdvance
mmioGetInfo
mmioClose

kernel32

ReleaseMutex
GetSystemDirectoryA
SetEnvironmentVariableA
CompareStringW
GetProcAddress
LoadLibraryA
FreeLibrary
GetTempPathA
CreateDirectoryA
GetFileAttributesA
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsFree
DeleteCriticalSection
CreateEventA
CloseHandle
SetEvent
WaitForSingleObject
CreateMutexA
GetLocaleInfoA
OutputDebugStringA
DisableThreadLibraryCalls
SetThreadPriority
CreateThread
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceFrequency
QueryPerformanceCounter
MapViewOfFile
GetSystemInfo
CreateFileMappingA
GetFileSize
UnmapViewOfFile
InterlockedIncrement
Sleep
GetLastError
InterlockedDecrement
MultiByteToWideChar
ResetEvent
GetVersionExA
GetACP
GetUserDefaultLCID
WideCharToMultiByte
CompareStringA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetCurrentThreadId
IsValidLocale
EnumSystemLocalesA
GetModuleFileNameA
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
GetTimeZoneInformation
DeleteFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapReAlloc
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
SetEndOfFile
GetTimeFormatA
GetDateFormatA
SetLastError
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
HeapSize
GetStdHandle
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetCurrentProcessId
VirtualAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers

user32

wsprintfA
GetKeyboardLayout

ole32

CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoTaskMemFree
CoUninitialize

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

DllMain
SOMPackageGetEntryPoints

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 604KB - Virtual size: 602KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8f787730bd1c0ace1216e4adf5cb09da

Headers

File Characteristics

Imports

ace

agm

bib

cooltype

winmm

kernel32

user32

ole32

advapi32

Exports

Exports

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 604KB - Virtual size: 602KB

.data Size: 132KB - Virtual size: 267KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 196KB - Virtual size: 194KB

.text Size: 96KB - Virtual size: 96KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 604KB - Virtual size: 602KB

.data
Size: 132KB - Virtual size: 267KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 196KB - Virtual size: 194KB

.text
Size: 96KB - Virtual size: 96KB