FlStudio20[.]9[.]2[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

FlStudio20.9.2.rar
Size

10.3MB
MD5

17122567d07d08eea01304c741278018
SHA1

8f41515cf81e5b3011e5462dff5779c28c7e0ddb
SHA256

ce8686036516da3a149882c1c99e0a5b3a3ea86e75ce76fde7d1ccd91f31f13b
SHA512

62f3596b68bde9ca68b2e53a8cfea37c5df3af44bb249587fc6a938b4c8ddb2d1848ee09b1f437acff4b035357c918309c54d3fadb09360c618321d336bdd302
SSDEEP

196608:oBbUj4hNgFQnMVXkC13OcKBwJzeXmxlSHJiTeGR9Y8LI0J3KqZLxD7HU:o6j4hSXTFKBUze0oiT9M+nZLxn0

Score

N/A

Malware Config

Signatures

Files

FlStudio20.9.2.rar
.rar

Password: 1515
Additional File/el.pak
Additional File/en-GB.pak
Additional File/en-US.pak
Additional File/es-419.pak
Additional File/es.pak
Additional File/et.pak
Additional File/fa.pak
Additional File/fi.pak
Additional File/fil.pak
Additional File/fr.pak
Additional File/gu.pak
Additional File/he.pak
Additional File/hi.pak
Additional File/hr.pak
Additional File/hu.pak
Additional File/id.pak
Additional File/it.pak
Additional File/ja.pak
Additional File/kn.pak
Additional File/ko.pak
Additional File/lt.pak
Additional File/lv.pak
Additional File/ml.pak
Additional File/mr.pak
Additional File/ms.pak
Additional File/nb.pak
Additional File/nl.pak
Additional File/pl.pak
Additional File/pt-BR.pak
Additional File/pt-PT.pak
Additional File/ro.pak
Additional File/ru.pak
Additional File/sk.pak
Additional File/sl.pak
Additional File/sr.pak
Additional File/sv.pak
Additional File/sw.pak
Additional File/ta.pak
Additional File/te.pak
Additional File/th.pak
Additional File/tr.pak
Additional File/uk.pak
Additional File/vi.pak
Additional File/zh-CN.pak
Additional File/zh-TW.pak
FlStudio20.9.2.exe
.exe windows x86

Password: 1515

3a61c09dd755bd1f9daed70fded66844

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AdjustTokenPrivileges
GetUserNameA
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA

kernel32

AddAtomW
DeleteCriticalSection
EnterCriticalSection
FreeConsole
FreeLibrary
GetLastError
GetLogicalDrives
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
GetSystemTimeAsFileTime
CreateEventA
GetModuleFileNameW
GetModuleHandleA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
LoadLibraryA
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetModuleHandleW
LoadResource
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
WriteConsoleW
SetStdHandle
IsProcessorFeaturePresent
DecodePointer
GetCommandLineA
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
RaiseException
LCMapStringW
GetStringTypeW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapSize
WriteFile
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

msvcrt

__getmainargs
__initenv
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf

user32

CharUpperBuffW

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 370KB - Virtual size: 369KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 288B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e'{
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_a
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_i
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_a
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_l
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_f
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug_s
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Yv+
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.h!s
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sop
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Locales/ca.pak
Locales/cs.pak
Locales/da.pak
Locales/de.pak
Locales/en-GB.pak
Locales/en-US.pak
Locales/es-419.pak
Locales/es.pak
Locales/et.pak
Locales/fi.pak
Locales/fil.pak
Locales/fr.pak
Locales/he.pak
Locales/hr.pak
Locales/hu.pak
Locales/id.pak
Locales/it.pak
Locales/ja.pak
Locales/ko.pak
Locales/lt.pak
Locales/lv.pak
Locales/ms.pak
Locales/nb.pak
Locales/nl.pak
Locales/pl.pak
Locales/pt-BR.pak
Locales/pt-PT.pak
Locales/ro.pak
Locales/sk.pak
Locales/sl.pak
Locales/sv.pak
Locales/sw.pak
Locales/tr.pak
Locales/vi.pak
Locales/zh-CN.pak
Locales/zh-TW.pak
New Text Document.txt
bin.dll
file.dll

Sharing

General

Malware Config

Signatures

Files

Password: 1515

Password: 1515

3a61c09dd755bd1f9daed70fded66844

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 132B

.rdata Size: 370KB - Virtual size: 369KB

.eh_fram Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 288B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 8B

.e'{ Size: 1KB - Virtual size: 1KB

.debug_a Size: 512B - Virtual size: 56B

.debug_i Size: 4KB - Virtual size: 3KB

.debug_a Size: 512B - Virtual size: 175B

.debug_l Size: 512B - Virtual size: 264B

.debug_f Size: 512B - Virtual size: 56B

.debug_s Size: 512B - Virtual size: 156B

.Yv+ Size: 2.3MB - Virtual size: 2.3MB

.h!s Size: 1KB - Virtual size: 1KB

.sop Size: 2.2MB - Virtual size: 2.2MB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 132B

.rdata
Size: 370KB - Virtual size: 369KB

.eh_fram
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 288B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 8B

.e'{
Size: 1KB - Virtual size: 1KB

.debug_a
Size: 512B - Virtual size: 56B

.debug_i
Size: 4KB - Virtual size: 3KB

.debug_a
Size: 512B - Virtual size: 175B

.debug_l
Size: 512B - Virtual size: 264B

.debug_f
Size: 512B - Virtual size: 56B

.debug_s
Size: 512B - Virtual size: 156B

.Yv+
Size: 2.3MB - Virtual size: 2.3MB

.h!s
Size: 1KB - Virtual size: 1KB

.sop
Size: 2.2MB - Virtual size: 2.2MB

.reloc
Size: 8KB - Virtual size: 7KB