a6d3c425dd927f849e9db5f5b1f6ea11d575dd52017d95a7f22f3135da168da5

Sharing

Copy URL

Twitter E-mail

General

Target

a6d3c425dd927f849e9db5f5b1f6ea11d575dd52017d95a7f22f3135da168da5
Size

512KB
MD5

38c1b7f4fe61ba0713091e88b8ddf5b4
SHA1

0205a8f4098f2382295bc960d9240481186328c6
SHA256

a6d3c425dd927f849e9db5f5b1f6ea11d575dd52017d95a7f22f3135da168da5
SHA512

29996754c56bfdfd2158bac64ee3cd8b0e27d18b08729ca8f763438af89e2d523c41c6e82bab016c92fc221fd18976c5038bdd0158f88b0e38261b613b36abf7
SSDEEP

6144:FxFiWHP9TIfLM7Jk6QRAOOpu371TBV+UdvrEFp7hKM:FHnlGeJONhBjvrEH7X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6d3c425dd927f849e9db5f5b1f6ea11d575dd52017d95a7f22f3135da168da5

Files

a6d3c425dd927f849e9db5f5b1f6ea11d575dd52017d95a7f22f3135da168da5
.dll windows:4 windows x86 arch:x86

9b2e270ca3ec3a817f07e38de9874eb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

mixerSetControlDetails
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetNumDevs
mixerGetDevCapsA
mixerGetLineInfoA
waveOutGetNumDevs
waveOutGetDevCapsA
waveInGetNumDevs
waveInGetDevCapsA
mixerGetID

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA

kernel32

GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoW
GetLocaleInfoA
InterlockedExchange
SetConsoleCtrlHandler
GetProcAddress
LoadLibraryA
FreeLibrary
GetPrivateProfileIntA
GetPrivateProfileStringA
DeviceIoControl
Sleep
ReleaseMutex
WaitForSingleObject
CloseHandle
ExitThread
GetLastError
WaitForMultipleObjects
CreateThread
SetEvent
GetStringTypeW
CreateFileA
WriteFile
SetFilePointer
CopyFileA
GetModuleFileNameA
GetWindowsDirectoryA
FindFirstFileA
GetVersionExA
GetLocalTime
lstrcpyA
lstrlenA
DisableThreadLibraryCalls
ReleaseSemaphore
CreateSemaphoreA
GetCurrentProcess
CreateMutexA
GetModuleHandleA
InitializeCriticalSection
HeapSize
GetConsoleMode
GetConsoleCP
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
ReadFile
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateEventA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
MultiByteToWideChar
RtlUnwind
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
ExitProcess
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation

user32

ExitWindowsEx
PostMessageA
RegisterWindowMessageA

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenProcessToken

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Exports

Exports

ClearToTerminate
CreateEventInterface
DestroyEventInterface
GetCapabilities
GetEventHandles
GetHWCachedInfoPtr
GetIndependentFrontMic
GetIndependentHeadphone
GetInterfaceVersion
GetJackDevice
GetJackFunction
GetOpMode
GetPlatformHWInformation
GetPlatformIDString
GetPlatformInformation
GetRearSpeakerMute
GetSPDIFCAPRATE
InitInterface
IsDriverLoaded
IsModulePresent
IsSilentRemoveRequired
IsUnInstallRequired
SMaxLog
SetIndependentFrontMic
SetIndependentHeadphone
SetJackDevice
SetRearSpeakerMute
SetSpeakerConfiguration
SetUserState
SetVRefLevel
SetVRefSettlingTime
SignalAudioDeviceRemoved
TerminateAllInst

Sections

.text
Size: 300KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b2e270ca3ec3a817f07e38de9874eb9

Headers

File Characteristics

Imports

winmm

version

setupapi

kernel32

user32

advapi32

ole32

Exports

Exports

Sections

.text Size: 300KB - Virtual size: 297KB

.rdata Size: 84KB - Virtual size: 80KB

.data Size: 12KB - Virtual size: 81KB

.idata Size: 8KB - Virtual size: 5KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 20KB - Virtual size: 17KB

.text
Size: 300KB - Virtual size: 297KB

.rdata
Size: 84KB - Virtual size: 80KB

.data
Size: 12KB - Virtual size: 81KB

.idata
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 20KB - Virtual size: 17KB