e5f23f43383ca5c22026967e424bd325a8dbc91ad1a3c277a5140bb339e387b3

Sharing

Copy URL Twitter E-mail

General

Target

e5f23f43383ca5c22026967e424bd325a8dbc91ad1a3c277a5140bb339e387b3
Size

719KB
MD5

cf3b3aeaee4d5f89445e6b95f516b38e
SHA1

6e92c85d7aab4889c64a1d3e54eb8708465fb55b
SHA256

e5f23f43383ca5c22026967e424bd325a8dbc91ad1a3c277a5140bb339e387b3
SHA512

ffd39642af5c65b7b19e1b1b548fb2d19e21719450681bbbc9fa0891d724aac6dfc9616c0f87353177d56a5e612cadefd65272235bf75bd290f2370c5ec7a720
SSDEEP

12288:s50nD/tmBSMIZ4QRAflrSZS2QmdPLpNdIkvVJcK8rX1ragiZpT:s50nD/5MIZlRAJ8SEpNrcK6Xhep

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5f23f43383ca5c22026967e424bd325a8dbc91ad1a3c277a5140bb339e387b3

Files

e5f23f43383ca5c22026967e424bd325a8dbc91ad1a3c277a5140bb339e387b3
.exe windows:6 windows x86 arch:x86

2c51e7e513b17f303e9f8904aade9a74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

fmod

_FSOUND_Init@12
_FSOUND_SetHWND@4
_FSOUND_Sample_Free@4
_FSOUND_Sample_SetMode@8
_FSOUND_Sample_GetDefaults@20
_FMUSIC_IsFinished@4
_FMUSIC_SetMasterVolume@8
_FMUSIC_SetPaused@8
_FMUSIC_StopSong@4
_FMUSIC_PlaySong@4
_FMUSIC_FreeSong@4
_FMUSIC_LoadSong@4
_FSOUND_CD_SetVolume@8
_FSOUND_CD_SetPaused@8
_FSOUND_CD_Stop@4
_FSOUND_CD_SetPlayMode@8
_FSOUND_CD_Play@8
_FSOUND_Stream_Stop@4
_FSOUND_Stream_Play@8
_FSOUND_Stream_Close@4
_FSOUND_Stream_Open@16
_FSOUND_3D_SetRolloffFactor@4
_FSOUND_3D_SetDistanceFactor@4
_FSOUND_3D_SetDopplerFactor@4
_FSOUND_3D_Listener_SetAttributes@32
_FSOUND_IsPlaying@4
_FSOUND_3D_SetAttributes@12
_FSOUND_SetPaused@8
_FSOUND_SetPan@8
_FSOUND_SetVolume@8
_FSOUND_SetFrequency@8
_FSOUND_StopSound@4
_FSOUND_PlaySoundEx@16
_FSOUND_PlaySound@8
_FSOUND_Sample_Load@20
_FSOUND_Update@0
_FSOUND_Close@0
_FSOUND_Sample_SetDefaults@20

winmm

timeGetDevCaps
timeBeginPeriod
timeGetTime
timeKillEvent
timeEndPeriod
timeSetEvent

dinput8

DirectInput8Create

ws2_32

WSACleanup
WSAStartup
gethostbyname
socket
setsockopt
sendto
send
select
recvfrom
recv
ntohs
htons
listen
inet_addr
ntohl
htonl
getsockname
getpeername
ioctlsocket
connect
closesocket
bind
accept

ddraw

DirectDrawEnumerateExA
DirectDrawCreateEx

d3dxof

DirectXFileCreate

kernel32

WriteFile
FlushFileBuffers
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
HeapAlloc
HeapFree
GetModuleFileNameW
GetModuleHandleExW
ReadFile
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileExW
LoadLibraryExW
TlsFree
GetConsoleMode
GetFileSizeEx
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
InterlockedFlushSList
RtlUnwind
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetFilePointerEx
UnhandledExceptionFilter
SleepConditionVariableSRW
ReadConsoleW
HeapReAlloc
IsValidCodePage
WakeAllConditionVariable
AcquireSRWLockExclusive
GetCommandLineA
ExitProcess
VirtualAlloc
GetModuleHandleA
LoadResource
LockResource
FindResourceA
FreeLibrary
GetProcAddress
LoadLibraryA
GetTempPathA
Sleep
GetSystemDirectoryA
GetWindowsDirectoryA
GetVersionExA
GetModuleFileNameA
CloseHandle
SetEvent
WaitForSingleObject
CreateEventA
FindClose
FindNextFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
DeleteFileA
FindFirstFileA
GetFileAttributesA
RemoveDirectoryA
CopyFileA
MultiByteToWideChar
VirtualFree
GetFullPathNameA
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
LCMapStringEx
GetStringTypeW
GetCPInfo
GetConsoleOutputCP
GetACP
GetOEMCP
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
HeapSize
WriteConsoleW
SetEndOfFile
SetUnhandledExceptionFilter
ReleaseSRWLockExclusive
WideCharToMultiByte

user32

GetDesktopWindow
LoadCursorA
ToAscii
MapVirtualKeyA
SystemParametersInfoA
GetCursorPos
SetCursor
SetCursorPos
ShowCursor
GetWindowRect
SetWindowLongA
SetWindowTextA
InvalidateRect
EndPaint
BeginPaint
SetForegroundWindow
ScreenToClient
GetSystemMetrics
ReleaseCapture
SetCapture
SetWindowPos
GetClientRect
GetWindowLongA
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExA
UnregisterClassA
RegisterClassA
DefWindowProcA
PostMessageA
PeekMessageA
DispatchMessageA
GetMessageA
MessageBoxA
UpdateWindow
ClientToScreen

gdi32

GetCharABCWidthsA
GetTextExtentPoint32A
RemoveFontResourceA
SelectObject
DeleteObject
SetTextColor
GetTextMetricsA
ExtTextOutA
DeleteDC
CreateFontA
CreateCompatibleDC
AddFontResourceA
SetBkColor
GetStockObject

shell32

ShellExecuteA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

Exports

Exports

_bbWinMain@0
runtimeGetRuntime

Sections

.text
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c51e7e513b17f303e9f8904aade9a74

Headers

DLL Characteristics

File Characteristics

Imports

fmod

winmm

dinput8

ws2_32

ddraw

d3dxof

kernel32

user32

gdi32

shell32

ole32

Exports

Exports

Sections

.text Size: 533KB - Virtual size: 532KB

.rdata Size: 134KB - Virtual size: 133KB

.data Size: 17KB - Virtual size: 47KB

.rsrc Size: 10KB - Virtual size: 10KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 533KB - Virtual size: 532KB

.rdata
Size: 134KB - Virtual size: 133KB

.data
Size: 17KB - Virtual size: 47KB

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 24KB - Virtual size: 23KB