035e723d2d94b0b62758b0b1e8531ace

Sharing

Copy URL Twitter E-mail

General

Target

035e723d2d94b0b62758b0b1e8531ace
Size

126KB
MD5

035e723d2d94b0b62758b0b1e8531ace
SHA1

318ab82467144bdb85aa26a5fdef150003be5573
SHA256

46dd363860716b4cd146cd62877c8efe8089586c60ff6b8a15c8bef614f0d0ec
SHA512

5e3f01c4ae3957f5c6d1cfcce53e50645d2613aa7b67a1af8791992e613cbbabc84d604bb2a3a49ea721701be9cb54502f31ef492f20c2761688ba5b31647cad
SSDEEP

3072:Qb5PLPdg2VskOTkX22KqBzCRu0hWXqMkaqKL7AJ+tE5E7Im:Qb5PLPi2VsPTr2KimyaMkaDsvCb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
035e723d2d94b0b62758b0b1e8531ace

Files

035e723d2d94b0b62758b0b1e8531ace
.exe windows:5 windows x64 arch:x64

3c4f495099d9b5a3fe42806fe83b0c9f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

FillRect

winmm

mixerGetDevCapsW
midiInPrepareHeader
waveOutGetPosition
mixerOpen
mixerGetLineControlsW
mmioCreateChunk
mixerGetNumDevs
mmioDescend
midiOutCachePatches
midiConnect
waveOutBreakLoop
timeGetSystemTime
midiOutLongMsg
mixerGetLineControlsA
mciGetDeviceIDW
mciGetDeviceIDFromElementIDW
mmioSeek
midiStreamStop
timeBeginPeriod
mciGetErrorStringA
mmioRenameW
waveOutWrite
mixerClose
waveInGetNumDevs
midiOutOpen
midiInMessage
auxSetVolume
midiStreamOut
midiStreamPause
waveOutMessage
waveInMessage
mciSendStringW
waveOutGetNumDevs
midiInOpen
auxOutMessage
waveInAddBuffer
waveOutSetPlaybackRate
waveInGetDevCapsA
midiOutMessage
joyGetDevCapsA
auxGetDevCapsW
midiInGetNumDevs
waveOutGetDevCapsW
waveInStart
midiOutUnprepareHeader
mmioClose
mciGetErrorStringW
waveOutOpen
auxGetVolume
mixerGetID
mixerGetControlDetailsA
midiInGetDevCapsW
mixerGetLineInfoW
mciGetDeviceIDA
waveOutGetPlaybackRate
sndPlaySoundA
waveOutClose
midiStreamOpen

kernel32

GetCommandLineA
HeapReAlloc
HeapAlloc
HeapSize
GetStringTypeW
MultiByteToWideChar
LCMapStringW
Sleep
HeapFree
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
GetVersion
HeapSetInformation
FlsAlloc
GetLastError
GetCurrentThreadId
SetLastError
FlsFree
FlsSetValue
FlsGetValue
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
RtlUnwindEx
GetModuleFileNameW
GetStdHandle
WriteFile
DecodePointer
ExitProcess
GetModuleHandleW
WaitForSingleObject
CreateThread
VirtualAlloc
GetStartupInfoW
EncodePointer
SetUnhandledExceptionFilter
GetProcAddress

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c4f495099d9b5a3fe42806fe83b0c9f

Headers

DLL Characteristics

File Characteristics

Imports

user32

winmm

kernel32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 52KB - Virtual size: 56KB

.pdata Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 870B

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 52KB - Virtual size: 56KB

.pdata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 870B