e83a873af960a432da3e5df827f9a2a1fa45e2002a065656247055dd2e914dde

Sharing

Copy URL

Twitter E-mail

General

Target

e83a873af960a432da3e5df827f9a2a1fa45e2002a065656247055dd2e914dde
Size

775KB
MD5

eb353cc031d5fc0dfd16b26ba43d8a31
SHA1

0df106f6f40554fc45e2ebe9dbfe5baff3a69601
SHA256

e83a873af960a432da3e5df827f9a2a1fa45e2002a065656247055dd2e914dde
SHA512

121c8c0b0933f2c42197dd9ad4fa4f0856f29ec0334dda8222b3f7b62de968b1d99a4aa5b1dfb3334287cbc6276283cbd3ae420d9549282f330e4392c009ac12
SSDEEP

12288:L1V4L4PCtGDtlLJgsGov6gYAMkZ6XlwAcMs+50tgAakT7hs5fDDbbjmh8Q0ukCEh:L1VUQDtlLJg3oH6XKAsCI/Akdos92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e83a873af960a432da3e5df827f9a2a1fa45e2002a065656247055dd2e914dde

Files

e83a873af960a432da3e5df827f9a2a1fa45e2002a065656247055dd2e914dde
.exe windows:5 windows x86 arch:x86

087cdb429a7615d6fc3179efa6e97910

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\vmagent_new\bin\joblist\617257\out\Release\MultiMediaOpt.pdb

Imports

kernel32

GetDriveTypeW
GetDiskFreeSpaceExW
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetVersion
CreateEventW
WaitForSingleObject
SetEvent
WaitForMultipleObjects
LoadLibraryW
CreateFileA
ReadFile
DeleteFileW
GetCurrentThreadId
GetCurrentProcessId
WriteFile
GetCommandLineW
SetLastError
ResetEvent
RaiseException
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
ExitProcess
CreateMutexW
MulDiv
DecodePointer
GetTempFileNameW
FindClose
InterlockedExchange
WritePrivateProfileStringW
DeviceIoControl
InitializeCriticalSection
GetPrivateProfileStringW
HeapDestroy
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
GetSystemDirectoryW
FindFirstFileExW
GetTimeZoneInformation
ReadConsoleW
InterlockedCompareExchange
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
HeapFree
GetFileType
GetACP
GetStdHandle
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
GetModuleHandleExW
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
LocalFree
ReleaseMutex
OpenThread
HeapWalk
HeapUnlock
HeapLock
SetFilePointerEx
SetEndOfFile
LocalFileTimeToFileTime
SystemTimeToFileTime
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
GetCPInfo
GetLogicalDriveStringsW
GetLongPathNameW
GetTempPathW
GetLongPathNameA
GetTempPathA
GetFileAttributesA
GetFileAttributesW
FindNextFileW
FindFirstFileW
CloseHandle
GetFileSizeEx
CreateFileW
FindResourceExW
GetProcessHeap
HeapAlloc
WideCharToMultiByte
Sleep
HeapReAlloc
GetVersionExW
GetSystemWindowsDirectoryW
GetModuleHandleW
GetCurrentProcess
LoadLibraryExW
FindResourceW
SizeofResource
LoadResource
LockResource
FreeResource
EnterCriticalSection
GetProcAddress
FreeLibrary
GetLocaleInfoW
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
EncodePointer
GetStringTypeW
GetDateFormatW
HeapSize
LeaveCriticalSection
GetModuleFileNameW
MultiByteToWideChar
GetConsoleMode

user32

GetWindowTextW
GetWindowRect
DrawTextW
SetCursor
GetParent
GetClientRect
EndPaint
BeginPaint
InvalidateRect
MessageBoxW
GetActiveWindow
ScreenToClient
SendMessageW
GetWindowTextLengthW
wsprintfW
FindWindowExW
PostMessageW
LoadCursorW
IntersectRect
RegisterClassW
GetClassInfoW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageTimeoutW
FindWindowW
CharNextW
EndDialog
ReleaseDC
GetDC
CreateWindowExW
CreateDialogParamW
GetClassInfoExW
RegisterClassExW
DestroyWindow
DialogBoxParamW
IsIconic
UpdateWindow
MoveWindow
EnableWindow
IsDialogMessageW
IsWindowVisible
PostQuitMessage
GetSystemMetrics
SetWindowTextW
LoadImageW
UnregisterClassW
CallWindowProcW
GetWindow
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
GetDlgItem
SetWindowPos
ShowWindow
IsWindow
SetWindowLongW
GetWindowLongW
DefWindowProcW

gdi32

SetStretchBltMode
GetObjectW
CreateCompatibleDC
CreateDIBSection
ExtTextOutW
SetBkColor
GetDeviceCaps
GetTextExtentPointW
DeleteObject
SelectObject
SetTextColor
DeleteDC
CreateFontW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegDeleteKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegDeleteValueW
RegSetValueExW

shell32

ord165
ShellExecuteW
SHGetPathFromIDListW
DragQueryFileW
SHBrowseForFolderW
SHCreateDirectoryExW
SHGetSpecialFolderPathW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoInitialize
CoUninitialize
CoCreateInstance
OleInitialize
CoTaskMemAlloc

oleaut32

VarUI4FromStr
SysFreeString
SysAllocString
SysStringByteLen
SysAllocStringByteLen
SysStringLen
VariantInit
VariantClear

version

VerQueryValueW

shlwapi

PathCombineW
PathFileExistsW
PathFindExtensionW
SHGetValueW
PathIsRelativeW
PathFindFileNameW
PathCanonicalizeW
PathRemoveFileSpecW
PathAppendW

comctl32

InitCommonControlsEx
ord17
_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdiplusShutdown
GdiplusStartup

Sections

.text
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

087cdb429a7615d6fc3179efa6e97910

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

version

shlwapi

comctl32

msimg32

gdiplus

Sections

.text Size: 443KB - Virtual size: 442KB

.rdata Size: 102KB - Virtual size: 102KB

.data Size: 14KB - Virtual size: 24KB

.rsrc Size: 104KB - Virtual size: 104KB

.reloc Size: 94KB - Virtual size: 96KB

.text
Size: 443KB - Virtual size: 442KB

.rdata
Size: 102KB - Virtual size: 102KB

.data
Size: 14KB - Virtual size: 24KB

.rsrc
Size: 104KB - Virtual size: 104KB

.reloc
Size: 94KB - Virtual size: 96KB