e16144a4d5711b62a35be1d368c32369

Sharing

Copy URL Twitter E-mail

General

Target

e16144a4d5711b62a35be1d368c32369
Size

140KB
MD5

e16144a4d5711b62a35be1d368c32369
SHA1

15c6a1e278f741eb2b4edd01386ddb9d18f2c935
SHA256

430a39fdfe005fe287e8c3cac665d2b20b051d8fe5a96bbedd6418c0b6a68fb6
SHA512

41eae827c6d6672254c1f2b47a46c3a8e2e3534782fec8e497ab291b38f4df7837649b0f054637563bb9cb9ae51ee33ec517c629dcd83f8f6cec967fad9c56f0
SSDEEP

3072:AzeC+fBGdIf7RF1NUv9ef8RAg0Fud8lLef8:a+ff7nU1vAOdA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e16144a4d5711b62a35be1d368c32369

Files

e16144a4d5711b62a35be1d368c32369
.dll windows:4 windows x86 arch:x86

7388485205b72a8407b4e32e3f97e553

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wmvcore

WMCreateProfileManager

kernel32

InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
CreateThread
WinExec
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
GetSystemInfo
LocalAlloc
LocalFree
GetComputerNameA
CreateFileA
GlobalMemoryStatus
QueryPerformanceCounter
GetLocalTime
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
DeviceIoControl
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
IsBadCodePtr
SetFilePointer
ReadFile
WriteFile
CloseHandle
VirtualProtect
GetStringTypeW
GetDiskFreeSpaceA
IsBadReadPtr
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
HeapFree
RtlUnwind
GetCommandLineA
ExitProcess
HeapReAlloc
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
VirtualQuery
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte

user32

MessageBoxA
DispatchMessageA
TranslateMessage
PeekMessageA
SendMessageA

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
GetUserNameA
RegOpenKeyExA
RegCloseKey

ole32

CoCreateInstance
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoInitialize

Exports

Exports

ASFCopy
ASFStop
ID3InfoRead
ID3InfoWrite

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7388485205b72a8407b4e32e3f97e553

Headers

File Characteristics

Imports

wmvcore

kernel32

user32

advapi32

ole32

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 93KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 8KB - Virtual size: 8KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 96KB - Virtual size: 93KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 8KB

.reloc
Size: 8KB - Virtual size: 4KB