d8d41e6487771a2ff861cb30dafa55535645fb508613184c377a5957beae1cfa

Sharing

Copy URL

Twitter E-mail

General

Target

d8d41e6487771a2ff861cb30dafa55535645fb508613184c377a5957beae1cfa
Size

5.6MB
MD5

80570e5b8796a1f3185b3dc10070b35c
SHA1

77b3f9c633950a7e6e5d165e4212fe5302ed1a83
SHA256

d8d41e6487771a2ff861cb30dafa55535645fb508613184c377a5957beae1cfa
SHA512

adf7ba4cdbd77c7cc0e73ae5be499b39e824400f02dc0a1dbdb2880ccd7653c802f82c2ee0192bcad0b4baff8e73ab2291c7991f7e866b7535d91b9ece75218c
SSDEEP

98304:5VQI2V12KqgebFxqWSIAo5lUyvabx2TnsDiSqrtAGDgHshra/BS0U1vM3VIjSsdl:52B/2f/+I3nUkabLDiSqrtAGDgHshras

Score

N/A

Malware Config

Signatures

Files

d8d41e6487771a2ff861cb30dafa55535645fb508613184c377a5957beae1cfa
.exe windows x86

22a3880118a741f146a4266796b3eae8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiDisconnect
midiOutGetDevCapsW
timeKillEvent
timeSetEvent
midiOutPrepareHeader
midiOutOpen
midiOutUnprepareHeader
midiOutSetVolume
midiOutShortMsg
midiOutLongMsg
midiOutClose
midiOutReset
mmioWrite
mmioOpenW
midiOutGetNumDevs
midiInGetID
midiInGetNumDevs
midiInGetDevCapsW
mmioGetInfo
mmioSeek
mmioClose
mmioCreateChunk
mmioSetInfo
mmioAscend
mmioDescend
mmioAdvance
midiInOpen
midiInStart
midiInClose
midiInStop
midiConnect

shlwapi

PathIsDirectoryW
PathIsRootW
PathFileExistsW
PathCombineW
ord388

kernel32

VirtualFree
VirtualProtect
VirtualAlloc
GetVersionExW
GetModuleHandleA
VirtualQuery
GetModuleHandleW
lstrcpyW
GetLogicalDrives
FindFirstFileW
FindNextFileW
FindClose
SizeofResource
lstrlenW
GetModuleFileNameW
WaitForSingleObject
GetFileAttributesW
MultiByteToWideChar
lstrcatW
LockResource
DeleteFileW
FindResourceW
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
CreateTimerQueue
SetEndOfFile
WriteConsoleW
HeapSize
InterlockedPopEntrySList
ReleaseSemaphore
QueryDepthSList
LoadResource
UnregisterWaitEx
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
WideCharToMultiByte
GetLastError
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapAlloc
GetFileType
SetFilePointerEx
GetFileSizeEx
HeapFree
HeapReAlloc
FreeLibraryAndExitThread
ExitThread
CreateThread
GetModuleHandleExW
GetStdHandle
GetPrivateProfileIntW
GetTickCount
LoadLibraryW
GetProcAddress
FreeLibrary
CreateEventW
SetEvent
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
LoadLibraryA
CreateFileW
ReadFile
WriteFile
LocalAlloc
LocalFree
ExitProcess
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
DuplicateHandle
WaitForSingleObjectEx
Sleep
SwitchToThread
GetCurrentThread
GetExitCodeThread
EncodePointer
DecodePointer
GetCPInfo
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
RtlUnwind
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW

user32

AppendMenuW
SetTimer
RegisterClassExW
CreateWindowExW
SetWindowPos
MessageBoxA
KillTimer
DestroyWindow
EnableWindow
DialogBoxParamW
CheckDlgButton
GetDlgItem
IsDlgButtonChecked
SetDlgItemTextW
AdjustWindowRectEx
ModifyMenuW
GetSystemMenu
DefWindowProcW
GetWindowRect
SendMessageW
ShowWindow
LoadStringW
GetWindowLongW
CallWindowProcW
wsprintfW
SetWindowLongW
GetDC
MessageBoxW
SetWindowTextW
EndDialog
GetFocus

gdi32

GetDeviceCaps

comdlg32

GetSaveFileNameW
GetOpenFileNameW

shell32

DragFinish
SHFileOperationW
ShellExecuteExW
DragQueryFileW
ShellExecuteW

comctl32

ord345

xaudio2_8

ord1

advapi32

RegCloseKey

ole32

CoCreateInstance

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 591KB - Virtual size: 591KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.0MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22a3880118a741f146a4266796b3eae8

Headers

DLL Characteristics

File Characteristics

Imports

winmm

shlwapi

kernel32

user32

gdi32

comdlg32

shell32

comctl32

xaudio2_8

advapi32

ole32

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.rdata Size: 591KB - Virtual size: 591KB

.data Size: 2.0MB - Virtual size: 7.5MB

_RDATA Size: 2KB - Virtual size: 1KB

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 107KB - Virtual size: 107KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 591KB - Virtual size: 591KB

.data
Size: 2.0MB - Virtual size: 7.5MB

_RDATA
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 107KB - Virtual size: 107KB