ffd9146144c59ee6f12be33f1a2209e9

Sharing

Copy URL Twitter E-mail

General

Target

ffd9146144c59ee6f12be33f1a2209e9
Size

281KB
MD5

ffd9146144c59ee6f12be33f1a2209e9
SHA1

6bd866530c85a88acc6a6794a780cc52a85e92f3
SHA256

e2ce7e6704ab1dc39db15401f45b5414c70b4ee9869595777d587f822270c7cd
SHA512

890b8cba97400e629e219206cf170ef404ff094c1894270416cf6400c0c32acde6188df3b0555ecbabd8675c86b79bb6e907ec8b3664cc196c10410ac3332960
SSDEEP

6144:yzw9p+cr/z2R2y4L0L4TDUK+rDl6dAWBW+OQqbhYaNOYouB8WR8M9f:6wD+cr7i22kDmrDldW8+OxwuMs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffd9146144c59ee6f12be33f1a2209e9

Files

ffd9146144c59ee6f12be33f1a2209e9
.dll windows:4 windows x86 arch:x86

11c7c4fb954b4d6ad58c597e12b6a15f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dsound

ord1

ole32

CoCreateInstance
CoInitialize
StringFromCLSID
CLSIDFromString

comctl32

ord17

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

LeaveCriticalSection
EnterCriticalSection
ResumeThread
Sleep
CloseHandle
GetDriveTypeA
CreateFileA
ReadFile
SetFilePointer
GetFileSize
GetVolumeInformationA
InitializeCriticalSection
FindNextFileA
FindFirstFileA
TerminateThread
WaitForSingleObject
GetVersionExA
DeviceIoControl
ResetEvent
CreateEventA
GetModuleFileNameA
LocalFree
FormatMessageA
IsBadStringPtrA
SearchPathA
GetLastError
IsBadWritePtr
IsBadReadPtr
LoadLibraryA
FreeLibrary
DeleteCriticalSection
CreateThread
GetWindowsDirectoryA
GetProcAddress
SuspendThread
GetSystemDefaultLangID

user32

EndPaint
IsIconic
IsZoomed
BeginPaint
ShowWindow
IsWindowVisible
MapWindowPoints
InvalidateRect
SetParent
GetWindowPlacement
SetWindowTextA
GetWindowTextA
SetWindowPlacement
GetDC
ReleaseDC
IsDlgButtonChecked
SetWindowLongA
SetWindowPos
SetDlgItemTextA
GetDlgItem
EnableWindow
DefWindowProcA
DestroyWindow
UnregisterClassA
RegisterClassA
CreateWindowExA
EndDialog
DialogBoxParamA
SendMessageA
PostMessageA
IsWindow
KillTimer
SetTimer
GetForegroundWindow
GetDesktopWindow
wsprintfA
GetMenu
GetWindowRect
GetWindowLongA
GetClientRect
ClientToScreen
LoadIconA
InSendMessage
GetSystemMetrics
LoadStringA
GetUpdateRect
GetDlgItemTextA
CheckDlgButton
GetActiveWindow
AdjustWindowRect

gdi32

SelectObject
CreateDIBSection
SetDIBits
CreatePen
BitBlt
Rectangle
DeleteObject
DeleteDC
CreateDCA
CreateSolidBrush
CreateCompatibleBitmap
RealizePalette
SelectPalette
ExtEscape
CreateCompatibleDC

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyExA
RegCloseKey

winmm

waveOutGetDevCapsA
mmioClose
mmioDescend
timeGetTime
mmioOpenA

msvcrt

_adjust_fdiv
__dllonexit
_onexit
_initterm
strtok
_purecall
??2@YAPAXI@Z
_strupr
_strnicmp
_stat
_stricmp
__CxxFrameHandler
isdigit
atoi
time
toupper
free
strncmp
malloc
_ftol
realloc
??3@YAXPAX@Z
strstr

Exports

Exports

_mmapiAngleChange
_mmapiAudioStreamChange
_mmapiBackwardScan
_mmapiButtonActivate
_mmapiButtonSelect
_mmapiButtonSelectAndActivate
_mmapiCapture
_mmapiChapterPlay
_mmapiChapterSearch
_mmapiCloseDrive
_mmapiCloseFile
_mmapiForwardScan
_mmapiGetAST_ATR
_mmapiGetAST_ATR_Ex
_mmapiGetAllGPRMs
_mmapiGetAllSPRMs
_mmapiGetAuOutputInterface
_mmapiGetAuOutputInterfaceCap
_mmapiGetAudioLCD
_mmapiGetCaption
_mmapiGetCurrentDomain
_mmapiGetCurrentVolumeInfo
_mmapiGetDVDTextInfo
_mmapiGetDiscRegion
_mmapiGetErrorString
_mmapiGetGamma
_mmapiGetGammaCap
_mmapiGetHeight
_mmapiGetLeft
_mmapiGetMessageDrain
_mmapiGetNumberOfChapters
_mmapiGetOwner
_mmapiGetPlacement
_mmapiGetRestorePosition
_mmapiGetSPST_ATR
_mmapiGetSubPicLCD
_mmapiGetTop
_mmapiGetV_ATR
_mmapiGetV_ATR_Ex
_mmapiGetVideoDisplayMode
_mmapiGetVideoDisplayModeSupported
_mmapiGetVisible
_mmapiGetWidth
_mmapiGetWindowPosition
_mmapiGetWindowState
_mmapiGetWindowStyle
_mmapiGetWindowStyleEx
_mmapiGoUp
_mmapiInfoQuery
_mmapiKaraokeAudioPresentationModeChange
_mmapiLeftButtonSelect
_mmapiLowerButtonSelect
_mmapiMenuCall
_mmapiMenuLanguageSelect
_mmapiMouseActivate
_mmapiMouseSelect
_mmapiNextPGSearch
_mmapiNotifyOwnerMessage
_mmapiOpenDrive
_mmapiOpenFile
_mmapiParentalCountrySelect
_mmapiParentalLevelSelect
_mmapiPauseOff
_mmapiPauseOn
_mmapiPrevPGSearch
_mmapiQueryBtnRect
_mmapiQueryDrvInfo
_mmapiQueryM_LCD_Ns
_mmapiQueryMediaType
_mmapiQueryMenuCodes
_mmapiQueryMenuExist
_mmapiQueryVersionExt
_mmapiResume
_mmapiRightButtonSelect
_mmapiSetAuOutputInterface
_mmapiSetAudioMode
_mmapiSetCaption
_mmapiSetGamma
_mmapiSetHeight
_mmapiSetLeft
_mmapiSetMessageDrain
_mmapiSetOwner
_mmapiSetPlacement
_mmapiSetTop
_mmapiSetVideoDisplayMode
_mmapiSetVisible
_mmapiSetWidth
_mmapiSetWindowPosition
_mmapiSetWindowState
_mmapiSetWindowStyle
_mmapiSetWindowStyleEx
_mmapiStatus
_mmapiStillOff
_mmapiStop
_mmapiSubpictureStreamChange
_mmapiTimePlay
_mmapiTimeSearch
_mmapiTitlePlay
_mmapiTopPGSearch
_mmapiUpperButtonSelect
_mmapiVideoPresentationModeChange

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

11c7c4fb954b4d6ad58c597e12b6a15f

Headers

File Characteristics

Imports

dsound

ole32

comctl32

version

kernel32

user32

gdi32

advapi32

winmm

msvcrt

Exports

Exports

Sections

.text Size: 225KB - Virtual size: 225KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 40KB - Virtual size: 1.9MB

.idata Size: 4KB - Virtual size: 3KB

.text
Size: 225KB - Virtual size: 225KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 40KB - Virtual size: 1.9MB

.idata
Size: 4KB - Virtual size: 3KB