b1fde47d307fee5f56fb320fe7af5aa6e6ab5070ba35ed58711a31ea53661345

Sharing

Copy URL Twitter E-mail

General

Target

b1fde47d307fee5f56fb320fe7af5aa6e6ab5070ba35ed58711a31ea53661345
Size

3.4MB
MD5

e7acebd4bd2a29ca21f5173df1f636d7
SHA1

252a3cc6c442039980c06c4d50e0951f7ea82022
SHA256

b1fde47d307fee5f56fb320fe7af5aa6e6ab5070ba35ed58711a31ea53661345
SHA512

c1f9189d1450910edaaae2f6909ff9f995344e2ab1bcede812dda2061f70938a437a777930ecd49c0a44de1db78c320b4f2828e795d0b2761a2a7bdd4e053599
SSDEEP

49152:4OJ1q0qawPoDcuD9eQmyMRaYNY9JNFh63ySgFca0OHrQPZjRDuvV8dOW4uJTSNnK:4PswK9eQmRby9iakDSKdUNnvxQAl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1fde47d307fee5f56fb320fe7af5aa6e6ab5070ba35ed58711a31ea53661345

Files

b1fde47d307fee5f56fb320fe7af5aa6e6ab5070ba35ed58711a31ea53661345
.exe windows:6 windows x86 arch:x86

c0a7a576ee0df9e866546301f261b0d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiOutReset
midiStreamRestart
midiOutSetVolume
midiStreamOut
midiStreamClose
midiStreamPause
midiStreamProperty
midiStreamOpen
midiStreamStop
midiOutUnprepareHeader
midiOutPrepareHeader
mciSendCommandA

opengl32

glFogf
glFogfv
glMatrixMode
glBlendFunc
glReadPixels
glLoadIdentity
glFinish
glHint
glReadBuffer
glAlphaFunc
glClipPlane
glClearColor
glTranslatef
glEnable
glEnd
glTexCoord2f
glBegin
glVertex2f
glColor4ub
glColor4f
glDisable
glPointSize
glRotatef
glFogi
glScalef
glClearDepth
glGetFloatv
glShadeModel
glPixelStorei
glDepthFunc
glGetString
glOrtho
glDrawBuffer
glGetIntegerv
glClearStencil
glPopMatrix
glVertex3f
glDepthMask
glArrayElement
glPushMatrix
glStencilOp
glPolygonOffset
glTexEnvf
glBindTexture
glStencilFunc
glColorMask
glTexParameterf
glTexImage2D
glViewport
wglCreateContext
wglGetProcAddress
wglDeleteContext
wglMakeCurrent
glDepthRange
glClear
glCullFace
glLoadMatrixf
glGenTextures
glDeleteTextures

openal32

alGenBuffers
alGetString
alcCreateContext
alSourceStop
alGetSourcei
alGetProcAddress
alSourcePlay
alSourcePause
alcOpenDevice
alSourceUnqueueBuffers
alcGetString
alcDestroyContext
alcMakeContextCurrent
alGenSources
alGetError
alSource3f
alDopplerVelocity
alcCloseDevice
alListenerfv
alIsExtensionPresent
alBufferData
alDeleteSources
alListener3f
alSourcei
alSourcef
alDopplerFactor
alSourceQueueBuffers
alDeleteBuffers

wsock32

socket
WSACleanup
bind
closesocket
WSAGetLastError
setsockopt
inet_ntoa
sendto
htons
htonl
recvfrom
gethostname
ntohs
WSAUnhookBlockingHook
WSASetBlockingHook
gethostbyaddr
getsockname
ioctlsocket
WSAStartup
WSACancelBlockingCall
ntohl
gethostbyname

kernel32

SetEndOfFile
HeapSize
GetTimeZoneInformation
WriteConsoleW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
MoveFileExW
SetEnvironmentVariableW
SetEnvironmentVariableA
HeapReAlloc
DecodePointer
DeleteFileW
CreateDirectoryW
SetStdHandle
GetFullPathNameW
GetCurrentDirectoryW
GetFileAttributesExW
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
CompareStringW
GetStringTypeW
HeapAlloc
GetACP
WriteFile
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
SetConsoleCtrlHandler
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
CreateFileW
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
ReadFile
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
RtlUnwind
SetLastError
GetLastError
EncodePointer
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTime
HeapFree
ReleaseMutex
GlobalUnlock
lstrcpynA
GlobalLock
GlobalFree
lstrcpyA
GlobalAlloc
GlobalHandle
WaitForSingleObject
CreateMutexA
ExitProcess
QueryPerformanceCounter
CreateEventA
CloseHandle
QueryPerformanceFrequency
FindClose
FindNextFileA
GetCurrentProcess
SetPriorityClass
FindFirstFileA
FreeLibrary
Sleep
LoadLibraryA
GetProcAddress

user32

wsprintfA
LoadCursorA
MsgWaitForMultipleObjects
TranslateAcceleratorA
LoadAcceleratorsA
MessageBoxA
DefWindowProcA
SendMessageA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowCursor
AdjustWindowRectEx
DispatchMessageA
DestroyWindow
GetDC
SetWindowPos
ShowWindow
ChangeDisplaySettingsA
CreateWindowExA
TranslateMessage
PeekMessageA
UpdateWindow
SetForegroundWindow
ReleaseDC

gdi32

SetPixelFormat
ChoosePixelFormat
PatBlt
SwapBuffers

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Exports

Exports

MikMod_Active
MikMod_DisableOutput
MikMod_DriverByOrdinal
MikMod_DriverFromAlias
MikMod_EnableOutput
MikMod_Exit
MikMod_GetVersion
MikMod_InfoDriver
MikMod_InfoLoader
MikMod_Init
MikMod_InitThreads
MikMod_Lock
MikMod_RegisterAllLoaders
MikMod_RegisterDriver
MikMod_RegisterErrorHandler
MikMod_RegisterLoader
MikMod_RegisterPlayer
MikMod_Reset
MikMod_SetNumVoices
MikMod_Unlock
MikMod_Update
MikMod_calloc
MikMod_critical
MikMod_errno
MikMod_free
MikMod_malloc
MikMod_realloc
MikMod_strdup
MikMod_strerror
Player_Active
Player_Free
Player_GetChannelPeriod
Player_GetChannelVoice
Player_GetModule
Player_GetOrder
Player_GetRow
Player_Load
Player_LoadFP
Player_LoadGeneric
Player_LoadMem
Player_LoadTitle
Player_LoadTitleFP
Player_LoadTitleGeneric
Player_LoadTitleMem
Player_Mute
Player_Muted
Player_NextPosition
Player_Paused
Player_PrevPosition
Player_QueryVoices
Player_SetPosition
Player_SetSpeed
Player_SetTempo
Player_SetVolume
Player_Start
Player_Stop
Player_ToggleMute
Player_TogglePause
Player_Unmute
Sample_Play
VC_Exit
VC_Init
VC_PlayStart
VC_PlayStop
VC_SampleLength
VC_SampleLoad
VC_SampleSpace
VC_SampleUnload
VC_SetCallback
VC_SetNumVoices
VC_SilenceBytes
VC_VoiceGetFrequency
VC_VoiceGetPanning
VC_VoiceGetPosition
VC_VoiceGetVolume
VC_VoicePlay
VC_VoiceRealVolume
VC_VoiceSetFrequency
VC_VoiceSetPanning
VC_VoiceSetVolume
VC_VoiceStop
VC_VoiceStopped
VC_WriteBytes
Voice_GetFrequency
Voice_GetPanning
Voice_GetPosition
Voice_GetVolume
Voice_Play
Voice_RealVolume
Voice_SetFrequency
Voice_SetPanning
Voice_SetVolume
Voice_Stop
Voice_Stopped
drv_nos
load_669
load_amf
load_asy
load_dsm
load_far
load_gdm
load_imf
load_it
load_m15
load_med
load_mod
load_mtm
load_okt
load_s3m
load_stm
load_stx
load_ult
load_umx
load_uni
load_xm
md_device
md_driver
md_mixfreq
md_mode
md_musicvolume
md_pansep
md_reverb
md_sndfxvolume
md_volume

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 710KB - Virtual size: 710KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0a7a576ee0df9e866546301f261b0d2

Headers

DLL Characteristics

File Characteristics

Imports

winmm

opengl32

openal32

wsock32

kernel32

user32

gdi32

ole32

Exports

Exports

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 710KB - Virtual size: 710KB

.data Size: 81KB - Virtual size: 1.2MB

.gfids Size: 512B - Virtual size: 216B

_RDATA Size: 1KB - Virtual size: 1KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 710KB - Virtual size: 710KB

.data
Size: 81KB - Virtual size: 1.2MB

.gfids
Size: 512B - Virtual size: 216B

_RDATA
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 17KB - Virtual size: 16KB