352aa9426c28ab775ec2b3a463386aa4bb6fbc990482e32f1247c9aa946b4047N

Sharing

Copy URL Twitter E-mail

General

Target

352aa9426c28ab775ec2b3a463386aa4bb6fbc990482e32f1247c9aa946b4047N
Size

8KB
MD5

aba42d42b4f9f8182f4e85a54a62e450
SHA1

98e85943f35e20bccd1b2b9f9d4956d83f357621
SHA256

352aa9426c28ab775ec2b3a463386aa4bb6fbc990482e32f1247c9aa946b4047
SHA512

a7558adfe2d6aea6c4505d0ea6e164019372273400b4febf2bfca1eec2986d51943dd37bdc5f86bccc8e513ce1523d98c71bb53c60f3e28f525bc4844b06c4ba
SSDEEP

192:RHvlvVELypjCCW8lATTd6L6QjAvHAP6X4edPXIPWcc21zskVo7:lvlNELyp5tlAELnE4UXIPWQf+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/midimap.dll

Files

352aa9426c28ab775ec2b3a463386aa4bb6fbc990482e32f1247c9aa946b4047N
.cab
midimap.dll
.dll windows:5 windows x86 arch:x86

858758d2f60c45c9d484e2294bbd270f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

midimap.pdb

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
memmove

user32

LoadStringW

kernel32

Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
CloseHandle
CreateMutexW
ReleaseMutex
WaitForSingleObject
LocalAlloc
LocalFree
lstrcpyW
lstrlenW
GetWindowsDirectoryW
GlobalFree
GlobalUnlock
lstrcmpiW
lstrlenA
GlobalHandle
lstrcatW
GlobalLock
GlobalAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess

advapi32

RegOpenKeyW
RegQueryValueExW
RegCloseKey

winmm

midiStreamStop
midiStreamRestart
midiStreamPause
midiStreamProperty
mmioRead
mmioSeek
midiStreamOut
midiOutReset
DefDriverProc
mmioClose
mmioAscend
mmioDescend
mmioOpenW
midiOutMessage
midiOutGetDevCapsW
DriverCallback
midiOutClose
midiOutOpen
midiStreamOpen
midiOutUnprepareHeader
midiOutPrepareHeader
midiStreamClose
midiStreamPosition
midiOutSetVolume
midiOutShortMsg
midiOutLongMsg
midiOutCacheDrumPatches
midiOutCachePatches

Exports

Exports

DriverProc
modMessage
modmCallback

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

858758d2f60c45c9d484e2294bbd270f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

user32

kernel32

advapi32

winmm

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 10KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 1KB - Virtual size: 1KB