a055841c6035a58e7a8610de499b11ce12a2cfe523ab430d047ef05159eb8556

Sharing

Copy URL Twitter E-mail

General

Target

a055841c6035a58e7a8610de499b11ce12a2cfe523ab430d047ef05159eb8556
Size

7.1MB
MD5

00ea0e6b2924f71475bda1c92398db42
SHA1

c163da5bbd8425aa0d5d8773dab48fe727e8b867
SHA256

a055841c6035a58e7a8610de499b11ce12a2cfe523ab430d047ef05159eb8556
SHA512

ac85c56a36dbbe228ff15e6240ae15aca45860d8efb20723322cbe7bf158173bd7c978f6fd59e3d89c91096d6e2fcde38fe5ac65bd21d7106a5e3ada73b7f54c
SSDEEP

98304:fpqpjlcrg7mIKBWtH3sHOXgI1EtBb0nuUtLhW9ofgKEhpyCMfVxae0sB7VhL2vu7:wNUnG/IBboNxfDyCVhLF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a055841c6035a58e7a8610de499b11ce12a2cfe523ab430d047ef05159eb8556

Files

a055841c6035a58e7a8610de499b11ce12a2cfe523ab430d047ef05159eb8556
.exe windows:5 windows x86 arch:x86

9cdfa864ff0a4aadb5f09de5938ac58e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\work\Piano Main\Piano\BIN\EveryonePiano.pdb

Imports

dsound

ord1
ord3

kernel32

GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
GetStringTypeW
GetStringTypeA
LCMapStringA
LeaveCriticalSection
EnterCriticalSection
CreateFileA
GetConsoleMode
SizeofResource
LockResource
LoadResource
FindResourceW
DeleteFileW
InterlockedExchange
GetSystemTime
Sleep
CreateThread
lstrcmpiW
CreateDirectoryW
CreateFileW
GetFileSize
ReadFile
CloseHandle
WriteFile
MulDiv
GetTickCount
LoadLibraryW
GetProcAddress
FreeLibrary
SetEndOfFile
GetFileSizeEx
CopyFileW
WaitForSingleObject
WideCharToMultiByte
lstrlenW
GetVersionExW
MoveFileExW
SetFilePointer
CreateMutexW
GetLastError
CreateProcessW
GetCommandLineW
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
FindFirstFileW
FindNextFileW
FindClose
SetThreadPriority
GetFileTime
FileTimeToSystemTime
GetPrivateProfileStringW
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
WritePrivateProfileStringW
GetPrivateProfileIntW
GetSystemDefaultLangID
GetLocaleInfoW
lstrlenA
GetSystemInfo
GetCurrentProcess
IsBadCodePtr
lstrcpyW
DuplicateHandle
GetFileType
SystemTimeToFileTime
GetCurrentDirectoryW
DosDateTimeToFileTime
SetFileTime
GetSystemDirectoryW
LocalFree
FormatMessageW
GlobalSize
SetLastError
GetModuleHandleA
GetCurrentProcessId
GetVersionExA
lstrcmpW
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetCurrentThreadId
InterlockedDecrement
FileTimeToLocalFileTime
LocalAlloc
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
GetVolumeInformationW
GetFullPathNameW
ResumeThread
SetEvent
SuspendThread
CreateEventW
lstrcmpA
CompareStringA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GlobalGetAtomNameW
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetFileAttributesW
SetErrorMode
GetTempFileNameW
GetTempPathW
SearchPathW
GetProfileIntW
VirtualProtect
FindResourceExW
GetStartupInfoW
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
VirtualQuery
ExitProcess
HeapSize
HeapReAlloc
RtlUnwind
RaiseException
ExitThread
SetStdHandle
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetConsoleCP

user32

CharUpperW
DestroyMenu
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
CallWindowProcW
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetWindowThreadProcessId
GetLastActivePopup
EndPaint
BeginPaint
GetMenuState
GetMenuStringW
InsertMenuW
RemoveMenu
EnumChildWindows
LoadImageW
LoadMenuW
LoadBitmapW
UpdateWindow
GetWindowDC
SetWindowRgn
GetSubMenu
DrawIconEx
DrawEdge
IsCharLowerW
GetKeyboardLayout
MapVirtualKeyExW
GetKeyNameTextW
MapVirtualKeyW
CharLowerBuffW
AdjustWindowRect
SetWindowLongA
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetWindowRgn
MoveWindow
DestroyWindow
SetWindowPos
ShowWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
FindWindowW
GetFocus
MessageBoxW
PeekMessageW
GrayStringW
DrawTextExW
TabbedTextOutW
DrawStateW
GetIconInfo
IsWindow
DrawFrameControl
InflateRect
OffsetRect
DrawTextW
ChildWindowFromPointEx
IsWindowEnabled
WindowFromPoint
GetCursorPos
GetSysColor
ReleaseCapture
SetCapture
ReleaseDC
ValidateRect
TranslateMessage
GetMessageW
IsWindowVisible
GetDC
DestroyIcon
SetRect
EnableWindow
InvalidateRect
GetWindowRect
ClientToScreen
GetCapture
ScreenToClient
PostMessageW
GetParent
SetCursor
PostQuitMessage
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
LoadCursorW
CopyRect
GetWindowInfo
AppendMenuW
CreatePopupMenu
SetForegroundWindow
IsZoomed
RedrawWindow
MessageBeep
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
GetSysColorBrush
UnregisterClassW
GetAsyncKeyState
SwapMouseButton
DrawIcon
GetSystemMetrics
IsIconic
SetWindowLongW
GetWindowLongW
LoadIconW
SystemParametersInfoW
KillTimer
SendMessageW
GetClientRect
DestroyCursor
CreateMenu
GetDoubleClickTime
SubtractRect
CopyIcon
CharUpperBuffW
GetUpdateRect
FrameRect
TranslateMDISysAccel
DrawMenuBar
PtInRect
FillRect
SetTimer
WaitMessage
DeleteMenu
PostThreadMessageW
CopyAcceleratorTableW
ToUnicodeEx
GetKeyboardState
DestroyAcceleratorTable
LoadAcceleratorsW
CreateAcceleratorTableW
NotifyWinEvent
SetParent
SetClassLongW
GetSystemMenu
IsMenu
IsRectEmpty
BringWindowToTop
LockWindowUpdate
RegisterClipboardFormatW
OpenClipboard
CopyImage
SetClipboardData
CloseClipboard
SetRectEmpty
EmptyClipboard
CharNextW
InvalidateRgn
GetNextDlgGroupItem
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
DrawFocusRect
SetCursorPos
UnionRect
EnableScrollBar
UpdateLayeredWindow
SetMenuDefaultItem
GetMenuDefaultItem
IsClipboardFormatAvailable
DefFrameProcW
DefMDIChildProcW

gdi32

SetPixelV
GetTextFaceW
EnumFontFamiliesExW
GetSystemPaletteEntries
GetNearestPaletteIndex
SetPaletteEntries
ExtFloodFill
LPtoDP
GetViewportOrgEx
GetBoundsRect
FrameRgn
FillRgn
GetWindowOrgEx
GetPaletteEntries
CreatePalette
RoundRect
Polygon
Ellipse
CreatePolygonRgn
CreateEllipticRgn
GetBkColor
RealizePalette
CreateRoundRectRgn
GetTextCharsetInfo
EnumFontFamiliesW
GetRgnBox
OffsetRgn
DPtoLP
GetMapMode
SetRectRgn
CreateRectRgnIndirect
GetDCOrgEx
CreateHatchBrush
GetObjectType
SelectPalette
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CopyMetaFileW
CreateDCW
CombineRgn
SetTextColor
SetBkColor
CreateDIBitmap
PatBlt
GetTextColor
Rectangle
PtInRegion
CreateRectRgn
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
Polyline
GetTextMetricsW
GetPixel
CreateFontW
GetTextExtentPoint32W
StretchDIBits
GetDIBits
CreateBitmap
SetDIBColorTable
SetPixel
GetDeviceCaps
AddFontMemResourceEx
CreatePen
GetStockObject
CreateDIBSection
GetDIBColorTable
StretchBlt
DeleteDC
CreateFontIndirectW
GetObjectW
CreateSolidBrush
DeleteObject
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegOpenKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegEnumKeyW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryValueW
RegEnumKeyExW
RegDeleteKeyW

shell32

ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
DragAcceptFiles
DragQueryFileW
DragFinish
SHGetFileInfoW
SHAppBarMessage

comctl32

InitCommonControlsEx
ImageList_GetIconSize
_TrackMouseEvent

shlwapi

PathFileExistsW
PathFindFileNameW
PathFindExtensionW
PathRemoveExtensionW
PathIsFileSpecW
StrToIntW
UrlUnescapeW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoInitialize
CoUninitialize
CoCreateInstance
PropVariantClear
CLSIDFromString
CreateStreamOnHGlobal
CoCreateGuid
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoInitializeEx
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleLockRunning
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleGetClipboard
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
IsAccelerator
OleTranslateAccelerator

oleaut32

SafeArrayDestroy
VariantCopy
VariantInit
SysAllocString
VariantClear
SysAllocStringLen
SysStringLen
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
VariantChangeType

gdiplus

GdipMeasureString
GdipSetStringFormatLineAlign
GdiplusShutdown
GdipFree
GdipDeletePrivateFontCollection
GdipAlloc
GdipNewPrivateFontCollection
GdipPrivateAddMemoryFont
GdipGetFontCollectionFamilyCount
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipSetStringFormatAlign
GdiplusStartup
GdipCreateFromHDC
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreateFont
GdipDeleteFont
GdipDrawString
GdipCreateBitmapFromStream
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipCreateStringFormat
GdipDeleteStringFormat
GdipCreateBitmapFromFile

winmm

midiOutClose
midiOutOpen
midiOutGetDevCapsW
midiInGetNumDevs
midiOutGetNumDevs
midiInGetDevCapsW
midiInOpen
PlaySoundW
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetLineInfoW
mixerClose
mixerOpen
timeEndPeriod
timeBeginPeriod
timeGetTime
midiOutShortMsg
midiInClose
midiInStart

d3d9

Direct3DCreate9

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wininet

InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryDataAvailable
InternetGetConnectedState
InternetQueryOptionW
InternetCrackUrlW
InternetReadFile
InternetOpenUrlW
InternetCanonicalizeUrlW
InternetCloseHandle
InternetOpenW

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Exports

Exports

createOveStreamLoader

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 502KB - Virtual size: 501KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 309KB - Virtual size: 80.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 437KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cdfa864ff0a4aadb5f09de5938ac58e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

dsound

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

winmm

d3d9

version

wininet

imm32

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 502KB - Virtual size: 501KB

.data Size: 309KB - Virtual size: 80.5MB

.rsrc Size: 3.6MB - Virtual size: 3.6MB

.reloc Size: 437KB - Virtual size: 437KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 502KB - Virtual size: 501KB

.data
Size: 309KB - Virtual size: 80.5MB

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

.reloc
Size: 437KB - Virtual size: 437KB