0a4041397e146ce5478ddcabf800b88f

Sharing

Copy URL

Twitter E-mail

General

Target

0a4041397e146ce5478ddcabf800b88f
Size

294KB
MD5

0a4041397e146ce5478ddcabf800b88f
SHA1

3afa6d793783c03fa72e3eed4f1e0a3c1194debd
SHA256

1596009ed905efa82a53eb9f38579457e5459105f455bc2a5d9ee0cd5d829e00
SHA512

0b2fde6ed5b4213d7dd7e7131dc4266d4ed3ae5d6034d78b7be993942cd913044c323a9b1b22a4de9bdd7c080b316c786d73d61c4a792212a059acd93beeb050
SSDEEP

6144:54slvGDgIUHgokezxgSx9u4BWO2SWPNGHyzAOmIR2:5V1QUHwqgm9u4B7WPjUIM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a4041397e146ce5478ddcabf800b88f

Files

0a4041397e146ce5478ddcabf800b88f
.dll windows:5 windows x86 arch:x86

8422ded9f34c7e76ec63af0f7adca958

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntA
GetModuleFileNameA
OutputDebugStringA
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
HeapReAlloc
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
MultiByteToWideChar
ReadFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
CloseHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
RaiseException
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetProcessHeap
GetModuleHandleA

user32

MessageBoxA

Exports

Exports

beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_params
lame_mp3_tags_fid
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right

Sections

.text
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8422ded9f34c7e76ec63af0f7adca958

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 207KB - Virtual size: 206KB

.rdata Size: 67KB - Virtual size: 67KB

.data Size: 9KB - Virtual size: 89KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 207KB - Virtual size: 206KB

.rdata
Size: 67KB - Virtual size: 67KB

.data
Size: 9KB - Virtual size: 89KB

.reloc
Size: 9KB - Virtual size: 8KB