8c25bef25e25ad82469a46dda125b84f861d23be5a18a3f73cea70797cce54ed

Sharing

Copy URL

Twitter E-mail

General

Target

8c25bef25e25ad82469a46dda125b84f861d23be5a18a3f73cea70797cce54ed
Size

123KB
MD5

490b63350a31aff76657d1d5aece19ad
SHA1

70c341d0b140b140e74f68e4e4adc586de37ca50
SHA256

8c25bef25e25ad82469a46dda125b84f861d23be5a18a3f73cea70797cce54ed
SHA512

f0c24bed5a8d990539932ab7bc66340c118941ff93bd9dec235a909eddb106e63c164ac4ac89c40238bf815929a39297cb89acaeab76d101e115d3541f375b94
SSDEEP

1536:lysdiHxwUC7A+ouiV7S7zZ0MErz4ji5sHh/IBzk9gvSJd9NmOOFYL4:l5dKwxA+S1S6r4GB2gvSJIOOFYL4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c25bef25e25ad82469a46dda125b84f861d23be5a18a3f73cea70797cce54ed

Files

8c25bef25e25ad82469a46dda125b84f861d23be5a18a3f73cea70797cce54ed
.exe windows:6 windows x86 arch:x86

8fccedf3099f8df74b73bc7dc0cfc0d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

SoundRecorder.pdb

Imports

advapi32

RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
ReportEventW
RegisterEventSourceW
DeregisterEventSource

kernel32

LoadResource
FindResourceW
GetLastError
CloseHandle
WaitForSingleObject
LoadLibraryW
GetProcAddress
GetModuleHandleW
lstrcmpiW
FlushInstructionCache
GetCurrentProcess
Sleep
CreateThread
CreateEventW
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteFileW
SetEvent
SetLastError
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
LockResource
GetLocaleInfoW
GetCommandLineW
HeapSetInformation
FindResourceExW
SetFilePointer
CreateFileW
WriteFile
RegisterApplicationRestart
CreateProcessW
GetSystemDirectoryW
ResetEvent
GetTempFileNameW
GetTempPathW
LocalFree
FormatMessageW
GetCurrentDirectoryW
MoveFileExW
EnumUILanguagesW
GetUserDefaultUILanguage
GetTimeFormatW
DelayLoadFailureHook
InterlockedCompareExchange
LoadLibraryExA
SizeofResource
GetModuleFileNameW
DeleteCriticalSection
RaiseException
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetVersionExA
InterlockedExchange
LoadLibraryA
VirtualFree
VirtualAlloc
GetStartupInfoW
InitializeCriticalSection
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
lstrlenW
UnhandledExceptionFilter
OutputDebugStringA

gdi32

GetObjectW
DeleteObject

user32

PostQuitMessage
FindWindowW
MessageBoxW
AdjustWindowRect
BringWindowToTop
CreateWindowExW
RegisterClassExW
GetDesktopWindow
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
SetCursor
LoadCursorW
GetClassInfoExW
IsWindow
SetFocus
ShowWindow
GetClientRect
GetWindowRect
MoveWindow
PostMessageW
SetWindowLongW
CharUpperW
GetWindow
GetTopWindow
SetWindowPos
GetWindowLongW
DefWindowProcW
CallWindowProcW
UnregisterClassA
LoadIconW
GetAncestor
CharNextW
LoadAcceleratorsW
LoadImageW
SetTimer
LoadMenuW
GetSubMenu
TrackPopupMenu
DestroyMenu
MapWindowPoints
TranslateAcceleratorW
KillTimer
LoadStringW
CreateDialogParamW
PostThreadMessageW
DestroyWindow
PeekMessageW
SwitchToThisWindow

msvcrt

malloc
memcpy_s
??_V@YAXPAX@Z
wcsncpy_s
memmove_s
swprintf_s
memset
_controlfp
?terminate@@YAXXZ
_onexit
_lock
free
__p__fmode
__dllonexit
_unlock
_errno
realloc
_except_handler4_common
__set_app_type
??3@YAXPAX@Z
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_wcsicmp
_vsnwprintf
??2@YAPAXI@Z
??_U@YAPAXI@Z
_purecall

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoUninitialize
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemFree
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VarUI4FromStr

shell32

ord190
SHCreateItemFromIDList
SHCreateItemFromParsingName
ShellAboutW
ord165
Shell_NotifyIconW
SHGetDiskFreeSpaceExW
ord75
ord155
SHGetFolderPathW

comctl32

ImageList_Create
ImageList_Add
ImageList_Destroy
ord17

winmm

timeGetTime
timeSetEvent
waveInGetDevCapsW
waveInGetNumDevs
timeKillEvent

shlwapi

StrToIntW
PathUnquoteSpacesW
PathRemoveBlanksW
StrChrW
PathStripToRootW
PathFindExtensionW
PathIsDirectoryW
PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
PathCombineW
StrStrW

uxtheme

SetWindowTheme

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8fccedf3099f8df74b73bc7dc0cfc0d1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ole32

oleaut32

shell32

comctl32

winmm

shlwapi

uxtheme

Sections

.text Size: 61KB - Virtual size: 61KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 56KB - Virtual size: 55KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 61KB - Virtual size: 61KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 56KB - Virtual size: 55KB

.reloc
Size: 3KB - Virtual size: 3KB