8a15821772a29c04630c93a7421776534113fdf267413fc36ca8a21d40a3c31c

Sharing

Copy URL

Twitter E-mail

General

Target

8a15821772a29c04630c93a7421776534113fdf267413fc36ca8a21d40a3c31c
Size

4.2MB
MD5

64d520176ee776bcfb48a62327bb03fb
SHA1

190efbdf78b80a010c3d3be7f1e0c7115e2767e9
SHA256

8a15821772a29c04630c93a7421776534113fdf267413fc36ca8a21d40a3c31c
SHA512

eebb739ea7ee12504dc6f80386e21400320a29bb0c443dd144b650fd250609b9032ae7a76ccc076bc1f161897c0d385472c1dcb3f22490c2653ad4bfaf7b6016
SSDEEP

49152:FcFFPQVqnY0wrnEp5p2Nq+PIrsrYPRR7BHgW3JdyA3E46fMMMMMGMxMMuxOMMBMd:FuY0unc50NqdRFAWuAU

Score

1^/10

Malware Config

Signatures

Files

8a15821772a29c04630c93a7421776534113fdf267413fc36ca8a21d40a3c31c
.exe windows x86

ddaff0c414add364a33bcc5d9f5bc548

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

kernel32

GetCurrentDirectoryA
WritePrivateProfileStringA
GlobalMemoryStatus
HeapAlloc
HeapFree
GetProcessHeap
QueryPerformanceCounter
SetCurrentDirectoryA
GetModuleFileNameA
QueryPerformanceFrequency
CreateThread
SetEvent
CreateEventA
IsBadStringPtrA
LCMapStringW
RtlUnwind
GetCommandLineA
FindClose
FindFirstFileA
CreateDirectoryA
GetDriveTypeA
SetFileAttributesA
ReadFile
WriteFile
SetFilePointer
GetFileSize
CreateFileA
ResumeThread
GetExitCodeThread
WaitForSingleObject
OutputDebugStringA
CloseHandle
GetProcAddress
TerminateThread
EnterCriticalSection
LeaveCriticalSection
GetVersion
GetVersionExA
GetCurrentThreadId
DeleteCriticalSection
CompareStringA
GetModuleHandleA
lstrcmpiW
GetThreadLocale
lstrcmpiA
GetLastError
InterlockedExchange
GetStringTypeExA
RaiseException
lstrlenW
CreateFileMappingA
MapViewOfFile
LocalAlloc
UnmapViewOfFile
CreateFileW
MultiByteToWideChar
GetACP
CompareStringW
GetEnvironmentVariableA
GetStringTypeExW
Sleep
WideCharToMultiByte
InitializeCriticalSection
SetEnvironmentVariableA
SetEndOfFile
GetLocaleInfoW
SetStdHandle
IsBadCodePtr
GetStartupInfoA
ExitThread
GetCurrentProcess
TerminateProcess
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetCurrentProcessId
SetUnhandledExceptionFilter
GetEnvironmentStringsW
FatalAppExitA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTickCount
InterlockedDecrement
GetLocaleInfoA
SetConsoleCtrlHandler
GetFileType
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
LocalFree
HeapSize
HeapReAlloc
HeapDestroy
SuspendThread
FreeLibrary
GetWindowsDirectoryA
GetFileAttributesA
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
IsBadReadPtr
GetSystemTime
lstrcatA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalSize
lstrcmpA
GetLocalTime
ExitProcess
InterlockedIncrement
GetSystemDefaultLangID
LoadLibraryA
LCMapStringA
GetTempPathA
DeleteFileA
HeapCreate
VirtualFree
IsBadWritePtr
FlushFileBuffers
GetTimeZoneInformation
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
lstrlenA
GetEnvironmentVariableW
GetCPInfo
FreeEnvironmentStringsW

user32

EnumDisplaySettingsA
CharUpperA
SetCapture
PostQuitMessage
GetClientRect
CharLowerW
EndPaint
ReleaseDC
MoveWindow
RegisterClassA
GetWindowRect
BeginPaint
ChangeDisplaySettingsA
ClientToScreen
EmptyClipboard
AdjustWindowRect
UpdateWindow
LoadImageA
GetSystemMetrics
ReleaseCapture
SystemParametersInfoA
DispatchMessageA
ClipCursor
ShowWindow
SetWindowPos
DefWindowProcA
CharUpperW
PeekMessageA
CreateWindowExA
UnregisterClassA
CharLowerA
MessageBoxA
GetKeyboardState
GetAsyncKeyState
wsprintfA
GetKeyState
SendMessageA
SetWindowLongA
LoadCursorA
InvalidateRect
SetFocus
MessageBoxW
LoadCursorFromFileA
SetCursor
SetRect
GetClipboardData
IsClipboardFormatAvailable
CloseClipboard
SetClipboardData
GetDC
OpenClipboard
ScreenToClient
GetFocus
GetMessageA
PostMessageA
SetSysColors
DestroyWindow
GetSysColor
CreateWindowExW
RegisterClassW
LoadIconA
PtInRect
SetCursorPos
GetCursorPos
TranslateMessage

gdi32

SetPixelFormat
SwapBuffers
DeleteDC
GetDeviceCaps
CreateDCA
ChoosePixelFormat
DeleteObject
CreateCompatibleDC
SelectObject
GetTextMetricsA
CreateSolidBrush
GetStockObject
CreateFontA
StretchBlt
TextOutW
CreateDIBSection
SetBkMode
SetTextColor
SetMapMode
GetTextExtentPoint32W
CreateFontIndirectA
GdiFlush
SetDIBits
SetSystemPaletteUse
GetPaletteEntries
RealizePalette
SelectPalette
CreatePalette
DescribePixelFormat
GetPixelFormat
UnrealizeObject
SetPaletteEntries
SetBkColor
BitBlt

ole32

CreateILockBytesOnHGlobal
CoCreateGuid
CoInitialize
StgCreateDocfileOnILockBytes
OleRun
CoUninitialize
CoCreateInstance

oleaut32

CreateErrorInfo
VariantInit
VariantChangeType
GetErrorInfo
SysAllocString
VariantClear
SysFreeString
SetErrorInfo

fmod

_FSOUND_GetMaxChannels@0
_FSOUND_StopSound@4
_FSOUND_Stream_Open@16
_FSOUND_Stream_Stop@4
_FSOUND_Stream_Play@8
_FSOUND_SetVolume@8
_FSOUND_Sample_Free@4
_FSOUND_Init@12
_FSOUND_Stream_Close@4
_FSOUND_SetPaused@8
_FSOUND_Sample_Load@20
_FSOUND_GetVersion@0
_FSOUND_Close@0
_FSOUND_PlaySound@8

directnetclient

?Release@iDirectNetClient@@QAEXXZ
?CreateInstance@iDirectNetClient@@SAPAV1@XZ

shlwapi

PathFileExistsA

opengl32

glColorPointer
glVertex3fv
glTexCoord2fv
glTexParameteri
glTexSubImage2D
glScissor
glColor4ub
glColor3ub
glVertex2f
glTexCoordPointer
glVertexPointer
glDisableClientState
glDrawElements
glTexEnvi
glAlphaFunc
glScalef
glBlendFunc
glColor4f
glVertex2i
glTexCoord2f
wglGetCurrentDC
glLoadIdentity
wglDeleteContext
glHint
glColor3f
glGenTextures
glLightfv
glEnable
wglShareLists
glTranslatef
glFogf
glViewport
glMatrixMode
glVertex3f
glRotatef
glPushMatrix
glGetFloatv
glPopMatrix
wglMakeCurrent
glFogfv
glDrawArrays
glFogi
glShadeModel
glBegin
glDisable
glInterleavedArrays
glBindTexture
glEnd
glOrtho
glClearColor
glClear
glEnableClientState
wglCreateContext
wglGetProcAddress
glGetString
glGetIntegerv
glDeleteTextures
glPushClientAttrib
glPopClientAttrib
glDepthMask
glPixelStorei
glReadPixels
glFrontFace
glTexImage2D

glu32

gluBuild2DMipmaps
gluLookAt
gluPerspective

iphlpapi

GetAdaptersInfo

wininet

InternetReadFileExA
HttpSendRequestA
InternetSetOptionA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA

ws2_32

inet_ntoa

advapi32

RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

shell32

ShellExecuteA

Exports

Exports

GetLocalMac
WriteGuidFile

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 400KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ddaff0c414add364a33bcc5d9f5bc548

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

ole32

oleaut32

fmod

directnetclient

shlwapi

opengl32

glu32

iphlpapi

wininet

ws2_32

advapi32

shell32

Exports

Exports

Sections

.text Size: 3.6MB - Virtual size: 3.6MB

.rdata Size: 400KB - Virtual size: 398KB

.data Size: 104KB - Virtual size: 1.6MB

.rsrc Size: 28KB - Virtual size: 24KB

.text
Size: 3.6MB - Virtual size: 3.6MB

.rdata
Size: 400KB - Virtual size: 398KB

.data
Size: 104KB - Virtual size: 1.6MB

.rsrc
Size: 28KB - Virtual size: 24KB