dc1fbd173fd2b25fe548ef65d3ab762a01a28e0deaaf91d1e9e35d4504673094

Sharing

Copy URL

Twitter E-mail

General

Target

dc1fbd173fd2b25fe548ef65d3ab762a01a28e0deaaf91d1e9e35d4504673094
Size

295KB
MD5

4289cfdfd7f07161268d6647ac9466c8
SHA1

52c239fbd6f3f2db4f60ce4690cf0bab20e8f935
SHA256

dc1fbd173fd2b25fe548ef65d3ab762a01a28e0deaaf91d1e9e35d4504673094
SHA512

b1ee3ca78b5e50c8e341af22461f89b0b8ba56f564d87a8f38d84caceed2768d6b1d70bab5cb298613c509936e8b2eac240e2328f58324611e7fc22a52afe73c
SSDEEP

3072:q9wah+kdrKQ3a5u5213f73ZaH5q3ZsAqTNYZbDbiR47YHl0hXdHxpi4T0to7UyZr:qrb3a5u5UDJfJR1Al0hXdi4woPZpfplN

Score

1^/10

Malware Config

Signatures

Files

dc1fbd173fd2b25fe548ef65d3ab762a01a28e0deaaf91d1e9e35d4504673094
.exe windows x86

b560bf6279ef5684821026a5a93109bd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutUnprepareHeader
waveOutGetPosition
waveOutRestart
waveOutPause
waveOutWrite
waveOutClose
waveOutReset
waveOutPrepareHeader
waveOutOpen

kernel32

WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
WaitForSingleObject
CloseHandle
CreateThread
SetThreadPriority
HeapAlloc
HeapCreate
HeapDestroy
Sleep
CreateFileA
ReadFile
SetFilePointer
FindResourceA
LoadResource
SizeofResource
GetFileSize
MapViewOfFile
GetConsoleOutputCP
SetEndOfFile
GetTickCount
WriteFile
CopyFileA
CreateFileMappingA
GetModuleHandleA
GetVersionExA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
WriteConsoleW
UnmapViewOfFile
LeaveCriticalSection
HeapSize
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
HeapReAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleW
GetProcAddress
ExitProcess
EnterCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSectionAndSpinCount
VirtualAlloc

user32

DialogBoxParamA
SetDlgItemTextA
SendDlgItemMessageA
LoadIconA
wsprintfA
GetWindowTextLengthA
SendMessageA
MessageBoxA
GetDlgItem
EndDialog
ReleaseCapture
GetDlgItemTextA

comdlg32

GetSaveFileNameA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHBrowseForFolderA
SHGetSpecialFolderPathA
SHGetPathFromIDListA

ole32

CoTaskMemFree

shlwapi

PathFileExistsA

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b560bf6279ef5684821026a5a93109bd

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

comdlg32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 78KB - Virtual size: 78KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 9KB - Virtual size: 218KB

.rsrc Size: 192KB - Virtual size: 192KB

.text
Size: 78KB - Virtual size: 78KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 9KB - Virtual size: 218KB

.rsrc
Size: 192KB - Virtual size: 192KB