ab6f3cd0365ccecf457f411ac27d5ef5

General

Target

ab6f3cd0365ccecf457f411ac27d5ef5
Size

268KB
MD5

ab6f3cd0365ccecf457f411ac27d5ef5
SHA1

76aa6df5746143880384d0d0465e60698c082ce4
SHA256

24d84ebabaea7d0de5529ece4e5262aa35a5013a49460272ab2612f4bbb5d2cb
SHA512

4b56af4237812da9cb965b655704f62671853b93a69b71764e51c17361f186b9067867ffb4c05387e2ea18b43cd3f4889026b4644b84627f7ab08f63974babd2
SSDEEP

6144:9CsNvBvGWFfwF0FiGAnAlf3RU6JXidgX:94Wzlpqdg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab6f3cd0365ccecf457f411ac27d5ef5

Files

ab6f3cd0365ccecf457f411ac27d5ef5
.dll windows:5 windows x86 arch:x86

ca105851ee79342fa1b7b64c04d24022

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CreateFileA
CloseHandle

Exports

Exports

getVersion
mad_frame_decode
mad_frame_finish
mad_frame_init
mad_stream_buffer
mad_stream_finish
mad_stream_init
mad_synth_frame
mad_synth_init

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca105851ee79342fa1b7b64c04d24022

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 77KB - Virtual size: 76KB

.rdata Size: 85KB - Virtual size: 84KB

.data Size: 6KB - Virtual size: 14KB

.rsrc Size: 93KB - Virtual size: 93KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 77KB - Virtual size: 76KB

.rdata
Size: 85KB - Virtual size: 84KB

.data
Size: 6KB - Virtual size: 14KB

.rsrc
Size: 93KB - Virtual size: 93KB

.reloc
Size: 5KB - Virtual size: 5KB