fdce78dbf1b113fe09859192a5c03b21b0f1884610913091ae63626bcd78947a

Sharing

Copy URL Twitter E-mail

General

Target

fdce78dbf1b113fe09859192a5c03b21b0f1884610913091ae63626bcd78947a
Size

150KB
MD5

15ee97dab2396de8c44b02844c350436
SHA1

b6d5b239d932769f9da10b95d8e2ee5a7fa87b23
SHA256

fdce78dbf1b113fe09859192a5c03b21b0f1884610913091ae63626bcd78947a
SHA512

bdc8231451d1d8c7f19de073f6cdfb06e0a144734f05e8ce59f8e449bfc6636d5c7b6ace5a0ffa766b104e83972e4e1f6b6f47a33f43f0217b2f99fbda0ff3fa
SSDEEP

3072:+VP5fq2FwNn8DhTiEpNzBC1ZJAV9DoRBbGyI36F:+95fMNn8D559URxjI3U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdce78dbf1b113fe09859192a5c03b21b0f1884610913091ae63626bcd78947a

Files

fdce78dbf1b113fe09859192a5c03b21b0f1884610913091ae63626bcd78947a
.exe windows:5 windows x86 arch:x86

1947e314bb7c10d20bdefcc30207bb29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

sndvol32.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA

kernel32

SizeofResource
LockResource
LoadResource
FindResourceW
LocalAlloc
LocalFree
lstrcmpW
GetProcAddress
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
ExitProcess
GetModuleHandleA
WriteFile
GlobalHandle
GetModuleFileNameA
LoadLibraryW
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
GetSystemDirectoryW
FreeLibrary
WideCharToMultiByte
GlobalReAlloc
CloseHandle
GlobalAlloc
FreeEnvironmentStringsA
GlobalLock
SetStdHandle
SetFilePointer
GlobalUnlock
GlobalFree
CreateFileW
GetStdHandle
FlushFileBuffers

gdi32

CreateCompatibleBitmap
SelectObject
CreateSolidBrush
DeleteDC
BitBlt
DeleteObject
CreateCompatibleDC

user32

SetScrollPos
GetWindowLongW
SubtractRect
MapWindowPoints
GetForegroundWindow
GetFocus
GetDlgCtrlID
KillTimer
EnableWindow
ShowWindow
GetWindow
EndPaint
DrawEdge
BeginPaint
DestroyWindow
SetFocus
SetForegroundWindow
SetWindowPos
OffsetRect
GetMonitorInfoW
MonitorFromPoint
GetCursorPos
GetDesktopWindow
WinHelpW
DestroyIcon
SetPropW
SetWindowLongW
EnableMenuItem
CreateWindowExW
MonitorFromRect
GetSystemMetrics
SetScrollInfo
GetClientRect
LoadIconW
MoveWindow
IsIconic
RemovePropW
RegisterClassW
DefDlgProcW
LoadCursorW
CreateDialogIndirectParamW
PostQuitMessage
DefWindowProcW
UnhookWindowsHook
DispatchMessageW
TranslateMessage
IsDialogMessageW
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
FindWindowW
SetWindowsHookW
LoadStringW
IsWindowEnabled
IsDlgButtonChecked
CheckRadioButton
EndDialog
DialogBoxParamW
FillRect
GetSysColor
GetUpdateRect
InvalidateRect
SetWindowTextW
MessageBoxW
MapDialogRect
GetWindowRect
PostMessageW
IsWindow
GetWindowTextW
SendMessageW
RegisterDeviceNotificationW
UnregisterDeviceNotification
GetPropW
CallWindowProcW
LoadImageW
GetDlgItem
CheckMenuItem
GetMenu
ScrollWindowEx

shell32

ShellAboutW

winmm

mixerGetLineControlsW
mixerSetControlDetails
waveOutGetDevCapsW
midiOutGetDevCapsW
midiOutGetNumDevs
auxGetDevCapsW
auxGetNumDevs
waveOutMessage
waveInMessage
mixerGetNumDevs
waveInGetNumDevs
waveOutGetNumDevs
mixerOpen
mixerClose
timeKillEvent
timeSetEvent
mixerGetDevCapsW
mixerGetLineInfoW
mixerGetID
mixerMessage
PlaySoundW
mixerGetControlDetailsW

comctl32

ord17

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceW
SetupDiCreateDeviceInfoList
SetupDiOpenDevRegKey

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1947e314bb7c10d20bdefcc30207bb29

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

gdi32

user32

shell32

winmm

comctl32

setupapi

Sections

.text Size: 69KB - Virtual size: 68KB

.data Size: 2KB - Virtual size: 11KB

.rsrc Size: 78KB - Virtual size: 142KB

.text
Size: 69KB - Virtual size: 68KB

.data
Size: 2KB - Virtual size: 11KB

.rsrc
Size: 78KB - Virtual size: 142KB