d578fc805e3b2398352a913002975b26

Sharing

Copy URL

Twitter E-mail

General

Target

d578fc805e3b2398352a913002975b26
Size

230KB
MD5

d578fc805e3b2398352a913002975b26
SHA1

c09a7f4d14a57f76e74f12a0d2a174877fefeb19
SHA256

2dd3d8828253c8a557fbb53f7a92aeea6f2a05eed5c915dc2b8f3f6132b929b2
SHA512

9c5b2b328193c42ee9265dde0814bdc568e25bfc29a4e100fd7011e4ae166d7a3bd8f0056b3a3e28aa256085b86130f37520b1e603bba35e8a6c7e7015efd2b5
SSDEEP

6144:FibnSx+iSjD+elcUrv0T7e1DgAQohzvVkSvuq25o5hj7AS:FibnQteuUJgyhzv2von7r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d578fc805e3b2398352a913002975b26

Files

d578fc805e3b2398352a913002975b26
.exe windows:5 windows x86 arch:x86

f3c8a48adcb78c266c29b573653971f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

AudioConverter.pdb

Imports

mfc42u

ord2385
ord1262
ord1258
ord2637
ord2567
ord4390
ord3569
ord2362
ord2634
ord1808
ord2293
ord6330
ord2574
ord4396
ord3635
ord693
ord4238
ord3688
ord3365
ord3288
ord6754
ord2746
ord5142
ord3806
ord5783
ord5784
ord3296
ord2859
ord2403
ord2015
ord4213
ord2570
ord4392
ord3577
ord3711
ord2444
ord2291
ord2350
ord2281
ord5977
ord6107
ord4992
ord1197
ord858
ord6898
ord3281
ord4118
ord4219
ord6451
ord6688
ord3871
ord1131
ord6279
ord6278
ord4215
ord2576
ord3649
ord2430
ord2858
ord1637
ord6266
ord6896
ord3716
ord795
ord3562
ord602
ord2809
ord3092
ord1921
ord4270
ord3792
ord3084
ord1941
ord4029
ord326
ord5781
ord2078
ord2070
ord6193
ord4847
ord4370
ord5261
ord4294
ord3614
ord2406
ord3621
ord1165
ord3658
ord790
ord616
ord609
ord2717
ord533
ord5188
ord5461
ord1989
ord798
ord538
ord561
ord815
ord3733
ord4616
ord5710
ord5285
ord5303
ord4692
ord4074
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord4269
ord4667
ord3087
ord861
ord940
ord2756
ord356
ord2762
ord2773
ord3173
ord4053
ord4210
ord3314
ord3176
ord668
ord825
ord535
ord2810
ord942
ord537
ord355
ord2507
ord3494
ord1196
ord2745
ord2294
ord823
ord4418
ord3397
ord5286
ord1768
ord6051
ord2397
ord6211
ord470
ord5785
ord6168
ord755
ord4704
ord5949
ord324
ord323
ord641
ord640
ord3592
ord4435
ord4831
ord6370
ord2371
ord2854
ord1633
ord1143
ord1634
ord3566
ord2855
ord4470
ord5871
ord4229
ord6195
ord4419
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord3793
ord5276
ord4347
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2356
ord2506
ord540
ord4155
ord800
ord2127
ord3000
ord818
ord567
ord860
ord1569

msvcrt

_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_cexit
_XcptFilter
_c_exit
_endthread
_beginthreadex
_purecall
iswspace
wcschr
wcsncmp
wcstok
_wtoi
_vsnwprintf
malloc
realloc
wcsstr
fclose
memset
wcscpy
swprintf
_snprintf
_snwprintf
memcmp
_CxxThrowException
wcsncpy
_wfopen
_CIpow
_itow
_exit
_except_handler3
free
__CxxFrameHandler
_wcsnicmp
_ftol
_wcsicmp
wcslen
_wunlink
_wsplitpath
_wmakepath
wcscmp
wcsrchr
wcscat

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetThreadToken
RevertToSelf
OpenThreadToken
RegFlushKey
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW

kernel32

GetModuleFileNameA
lstrlenA
GetVersionExA
LoadLibraryA
GetStartupInfoW
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
MulDiv
CompareStringW
WaitForSingleObject
GetFileAttributesW
CreateDirectoryW
lstrcpynW
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
lstrlenW
EnterCriticalSection
LeaveCriticalSection
GetCommandLineW
CreateMutexW
OpenMutexW
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameW
DeleteCriticalSection
RaiseException
GetProcAddress
CreateFileW
WriteFile
CloseHandle
GetWindowsDirectoryW
Sleep
GetLastError
InitializeCriticalSection
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetEvent
UnmapViewOfFile
VirtualAlloc
IsBadReadPtr
GetSystemInfo
MapViewOfFile
CreateFileMappingA
GetCurrentThread
GetVersion
TryEnterCriticalSection
GlobalFree
GlobalHandle
GetTempFileNameW
FormatMessageW
CopyFileW
GetLocaleInfoW
GetNumberFormatW
GetDiskFreeSpaceExW
GetFileSize
SetFilePointer
ResetEvent
CreateEventW
FindClose
FindNextFileW
FindFirstFileW
GetSystemDefaultLCID
GetUserDefaultLCID
GetModuleHandleW

gdi32

CreateBitmap
SetBkMode
GetObjectW
CreateCompatibleDC
SelectObject
StretchBlt
ExtTextOutW
SetBrushOrgEx
DeleteObject
CreateSolidBrush
CreateFontIndirectW
BitBlt
PatBlt
CreatePatternBrush
GetStockObject
DeleteDC
Rectangle
CreatePen
GetDeviceCaps

user32

GetWindowLongW
SetWindowLongW
LoadStringW
GetParent
CallWindowProcW
UpdateWindow
DestroyCursor
RedrawWindow
IsIconic
IsWindow
DrawIcon
PostMessageW
CharNextW
SetRectEmpty
MessageBeep
SetRect
SetTimer
UnionRect
SetClassLongW
AdjustWindowRect
SetCursor
LoadCursorW
GetCursorPos
IsDialogMessageW
GetTopWindow
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageW
PeekMessageW
MessageBoxW
OffsetRect
GetWindowRect
GetClientRect
SendMessageW
EnableWindow
LoadIconW
LoadBitmapW
GetDC
ReleaseDC
GetSysColor
FillRect
InvalidateRect
MapWindowPoints
GetClassNameW
GetSystemMetrics
LoadMenuW
GetSubMenu
EnableMenuItem
DeleteMenu
KillTimer
EnumWindows
GetWindowTextW
SystemParametersInfoW

shell32

DragQueryFileW
SHGetFolderPathW
SHFileOperationW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
RevokeDragDrop
ReleaseStgMedium
RegisterDragDrop
CoRevokeClassObject

oleaut32

SysAllocString
SafeArrayDestroy
SysStringLen
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysFreeString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector

comdlg32

GetOpenFileNameW

comctl32

ord17

oleacc

CreateStdAccessibleObject
LresultFromObject

shlwapi

PathIsNetworkPathW
PathIsDirectoryW
PathFileExistsW
PathIsRootW

winmm

OpenDriver
GetDriverModuleHandle
CloseDriver

wmvcore

WMCreateSyncReader
WMCreateReader
WMCreateWriter
WMCreateProfileManager
WMCreateEditor

msvcp60

??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

msacm32

acmDriverAddW
acmDriverOpen
acmStreamSize
acmFormatEnumW
acmStreamOpen
acmStreamClose
acmDriverClose
acmDriverRemove
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader

avifil32

AVIFileOpenW
AVIStreamRead
AVIStreamSampleToTime
AVIStreamLength
AVIStreamStart
AVIFileGetStream
AVIFileInit
AVIFileExit
AVIFileRelease
AVIStreamRelease
AVIStreamReadFormat

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f3c8a48adcb78c266c29b573653971f3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mfc42u

msvcrt

advapi32

kernel32

gdi32

user32

shell32

ole32

oleaut32

comdlg32

comctl32

oleacc

shlwapi

winmm

wmvcore

msvcp60

msacm32

avifil32

Sections

.text Size: 181KB - Virtual size: 180KB

.data Size: 5KB - Virtual size: 5KB

.rsrc Size: 43KB - Virtual size: 47KB

.text
Size: 181KB - Virtual size: 180KB

.data
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 43KB - Virtual size: 47KB