3dce2736ed3664d687af93fe0cbde68c2e26cb40d8b054c3c8cfcc69e3b2e64a

Sharing

Copy URL Twitter E-mail

General

Target

3dce2736ed3664d687af93fe0cbde68c2e26cb40d8b054c3c8cfcc69e3b2e64a
Size

268KB
MD5

734a8411221dc83d9c4a47949bc0764e
SHA1

7be7fd7d6b68cc680899ced916c3695c50dac7c9
SHA256

3dce2736ed3664d687af93fe0cbde68c2e26cb40d8b054c3c8cfcc69e3b2e64a
SHA512

320c1be1c05f38e5f3fdb21b231d2b0251efb053fbe3195ed266605f7ffc36ac92cbdf260885f12f79c7ba35e5f02f4f42a993f1301faa9285f4f697c8b3ca72
SSDEEP

3072:nmGNQN9/iICL74gH6QsgK8gyrurl0kKmd4/aO3+r4jX3qZVTzrhvwlV61SpKd9t7:mH9A3sgP/aO3+rgXaTTdwlV61XFq9m1

Score

N/A

Malware Config

Signatures

Files

3dce2736ed3664d687af93fe0cbde68c2e26cb40d8b054c3c8cfcc69e3b2e64a
.dll windows x86

36eeb40a5ec5cab3814e94d3c82bac50

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

authorscripthdmv

_AS_HDMV_SelectDevice@8
_AS_HDMV_GetDeviceCount@4
_AS_HDMV_CreateProject@12
_AS_HDMV_SetLogFile@4
_AS_HDMV_SetMessageLanguage@4
_AS_HDMV_Quit@0
_AS_HDMV_Init@4

gemthread

?join@GemThread@@QAEHXZ
??0GemThread@@QAE@PAVGemRunnable@@PBD@Z

systembasic

?Load@LRegistryLoader@Leonids@@QBE_NABVLString@2@AAK@Z
??1LRegistryLoader@Leonids@@QAE@XZ
??0LString@Leonids@@QAE@XZ
??0LRegistryLoader@Leonids@@QAE@ABVLString@1@@Z
??0LString@Leonids@@QAE@PBG@Z
??0LString@Leonids@@QAE@ABV01@@Z
?GetFreeDiskSpace@LFolder@Leonids@@QBE_KXZ
??1LFolder@Leonids@@UAE@XZ
?DeleteFiles@LFolder@Leonids@@QAEXXZ
??0LFolder@Leonids@@QAE@ABVLString@1@@Z
?Append@LString@Leonids@@QAEXPBG@Z
??1LFileList@Leonids@@QAE@XZ
??4LString@Leonids@@QAEAAV01@ABV01@@Z
?GetLength@LString@Leonids@@QBEHXZ
?Insert@LString@Leonids@@QAEXIPBG@Z
??1LString@Leonids@@QAE@XZ
?GetPathName@LFile@Leonids@@QBEABVLString@2@XZ
?GetString@LString@Leonids@@QBEPBGXZ
??0LFile@Leonids@@QAE@ABV01@@Z
?LFILE_LOG@Leonids@@YAXPBGZZ
??1LFile@Leonids@@UAE@XZ
?GetPath@LFolder@Leonids@@QBEABVLString@2@XZ
?CreateTempFileName@LTemporaryNameCreator@Leonids@@SA_NABVLString@2@PBG1AAV32@@Z
?IsNullFile@LFile@Leonids@@QBE_NXZ
?GetCount@LFileList@Leonids@@QBEIXZ
?GetFile@LFileList@Leonids@@QBEABVLFile@2@I@Z
??0LFileList@Leonids@@QAE@ABV01@@Z

utility

?GetInstance@LUnique@Leonids@@SAPAV12@XZ
??0LMediaInfo@Leonids@@QAE@XZ
?GetMilliSec@LVideoTime@Leonids@@QBE_JXZ
??0LVideoTime@Leonids@@QAE@ABV01@@Z
??1LVideoTime@Leonids@@QAE@XZ
?GetTempFolder@LUnique@Leonids@@QBEABVLFolder@2@XZ
?GetWorkAndCaptureBasePath@LUnique@Leonids@@QBEABVLString@2@XZ
??1LMediaInfo@Leonids@@UAE@XZ

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime
WaitForMultipleObjects
GetTempPathW
CloseHandle
CreateEventW
ResetEvent
Sleep
WaitForSingleObject
SetEvent

ole32

CoUninitialize
CoInitialize

msvcp80

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

msvcr80

?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_except_handler4_common
_encode_pointer
?terminate@@YAXXZ
wcscat_s
memcpy
memmove_s
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
_wcsicmp
memset
??0exception@std@@QAE@ABV01@@Z
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_malloc_crt
??8type_info@@QBE_NABV0@@Z
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
_purecall
__RTDynamicCast
__CxxFrameHandler3
_CxxThrowException
??2@YAPAXI@Z
_onexit

Exports

Exports

??0ILAsHdmvButton@@QAE@ABV0@@Z
??0ILAsHdmvButton@@QAE@XZ
??0ILAsHdmvDevice@@QAE@ABV0@@Z
??0ILAsHdmvDevice@@QAE@XZ
??0ILAsHdmvManager@@QAE@ABV0@@Z
??0ILAsHdmvManager@@QAE@XZ
??0ILAsHdmvMenuPage@@QAE@ABV0@@Z
??0ILAsHdmvMenuPage@@QAE@XZ
??0ILAsHdmvMovieObject@@QAE@ABV0@@Z
??0ILAsHdmvMovieObject@@QAE@XZ
??0ILAsHdmvPlayList@@QAE@ABV0@@Z
??0ILAsHdmvPlayList@@QAE@XZ
??0ILAsHdmvProgressListener@@QAE@ABV0@@Z
??0ILAsHdmvProgressListener@@QAE@XZ
??0ILAsHdmvProject@@QAE@ABV0@@Z
??0ILAsHdmvProject@@QAE@XZ
??1ILAsHdmvButton@@MAE@XZ
??1ILAsHdmvDevice@@MAE@XZ
??1ILAsHdmvManager@@MAE@XZ
??1ILAsHdmvMenuPage@@MAE@XZ
??1ILAsHdmvMovieObject@@MAE@XZ
??1ILAsHdmvPlayList@@MAE@XZ
??1ILAsHdmvProgressListener@@MAE@XZ
??1ILAsHdmvProject@@MAE@XZ
??4ILAsHdmvButton@@QAEAAV0@ABV0@@Z
??4ILAsHdmvDevice@@QAEAAV0@ABV0@@Z
??4ILAsHdmvManager@@QAEAAV0@ABV0@@Z
??4ILAsHdmvMenuPage@@QAEAAV0@ABV0@@Z
??4ILAsHdmvMovieObject@@QAEAAV0@ABV0@@Z
??4ILAsHdmvPlayList@@QAEAAV0@ABV0@@Z
??4ILAsHdmvProgressListener@@QAEAAV0@ABV0@@Z
??4ILAsHdmvProject@@QAEAAV0@ABV0@@Z
??_7ILAsHdmvButton@@6B@
??_7ILAsHdmvDevice@@6B@
??_7ILAsHdmvManager@@6B@
??_7ILAsHdmvMenuPage@@6B@
??_7ILAsHdmvMovieObject@@6B@
??_7ILAsHdmvPlayList@@6B@
??_7ILAsHdmvProgressListener@@6B@
??_7ILAsHdmvProject@@6B@
?CreateInstance@ILAsHdmvManager@@SAPAV1@XZ

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36eeb40a5ec5cab3814e94d3c82bac50

Headers

File Characteristics

Imports

authorscripthdmv

gemthread

systembasic

utility

kernel32

ole32

msvcp80

msvcr80

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 104KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 112KB - Virtual size: 111KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 108KB - Virtual size: 104KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 112KB - Virtual size: 111KB

.reloc
Size: 12KB - Virtual size: 8KB