21cdb6f738384cc3a80bbc5fcaf817b8e4ac73e4d54eef605293245f628520df

Sharing

Copy URL Twitter E-mail

General

Target

21cdb6f738384cc3a80bbc5fcaf817b8e4ac73e4d54eef605293245f628520df
Size

594KB
MD5

e46467edf03d95bd525ce540dae1783c
SHA1

f8626a73cd33ecf8ee0ef554f5428235eb2595bb
SHA256

21cdb6f738384cc3a80bbc5fcaf817b8e4ac73e4d54eef605293245f628520df
SHA512

195d8f80474a5cea5972d16f25ad1df492736d0b4e969bf3a7c15ee284109c7dbe764c5f91a108b266c5822f5cdf39147e570ba33dc8b69bc170d7a3beaf0f37
SSDEEP

12288:buCWO4vWT4Y8RjVln3LwMpONjh9wMpGruXBGys:buCWOYe8RjHwMGhceGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21cdb6f738384cc3a80bbc5fcaf817b8e4ac73e4d54eef605293245f628520df

Files

21cdb6f738384cc3a80bbc5fcaf817b8e4ac73e4d54eef605293245f628520df
.dll windows:5 windows x86 arch:x86

a4b7784ce3d93f394c5761747e7e587a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
LoadLibraryW
GetProcAddress
lstrcmpW
InitializeCriticalSectionAndSpinCount
SetEndOfFile
CreateFileW
WriteConsoleW
SetFilePointerEx
SetStdHandle
LCMapStringW
FlushFileBuffers
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointer
ReadFile
GetModuleHandleW
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
GetVersionExA
Sleep
GetVersion
LocalFree
LocalAlloc
GetLastError
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetLocalTime
CloseHandle
SetThreadPriority
CreateEventA
SetEvent
WaitForSingleObject
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
CreateThread
ExitThread
LoadLibraryExW
InterlockedDecrement
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
WriteFile
GetModuleFileNameW
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
SetLastError
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree

user32

wvsprintfW
MessageBoxA
wsprintfA

ole32

CoCreateInstance

winmm

mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetLineInfoW
waveOutGetDevCapsW
mixerSetControlDetails
waveInGetDevCapsW
waveInGetNumDevs
mixerOpen
mixerClose
mixerGetNumDevs
waveOutUnprepareHeader
mixerGetControlDetailsA
mixerGetDevCapsA
mixerGetDevCapsW
timeSetEvent
waveOutGetNumDevs
timeKillEvent
waveInAddBuffer
waveInPrepareHeader
waveInUnprepareHeader
waveInClose
waveInStop
waveInReset
waveInOpen
waveOutPrepareHeader
waveOutClose
waveOutReset
waveOutOpen
waveOutWrite
waveOutGetPosition
waveInStart
waveInGetPosition
timeGetTime
mixerGetLineControlsA
mixerGetLineInfoA

Exports

Exports

AudioEngine_EnableAudio
AudioEngine_EnumAudioDevices
AudioEngine_GetAudioDevice
AudioEngine_GetAudioLines
AudioEngine_GetStreamCapability
AudioEngine_GetVolume
AudioEngine_HasMixer
AudioEngine_InitAudio
AudioEngine_OnAudioIn
AudioEngine_Pause
AudioEngine_Play
AudioEngine_ReleaseAudio
AudioEngine_SelectAudioLineByName
AudioEngine_SelectAudioLineByType
AudioEngine_SelectMicphone
AudioEngine_SelectMixer
AudioEngine_SetCallback
AudioEngine_SetVolume
AudioEngine_Stop

Sections

.text
Size: 375KB - Virtual size: 374KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4b7784ce3d93f394c5761747e7e587a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

winmm

Exports

Exports

Sections

.text Size: 375KB - Virtual size: 374KB

.rdata Size: 148KB - Virtual size: 148KB

.data Size: 33KB - Virtual size: 716KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 36KB - Virtual size: 35KB

.text
Size: 375KB - Virtual size: 374KB

.rdata
Size: 148KB - Virtual size: 148KB

.data
Size: 33KB - Virtual size: 716KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 36KB - Virtual size: 35KB