01fb09e3744a9415226877b50a7cc2201036dd7c9cee410e86531a54f52c9177

Sharing

Copy URL Twitter E-mail

General

Target

01fb09e3744a9415226877b50a7cc2201036dd7c9cee410e86531a54f52c9177
Size

278KB
MD5

4d1cbd24a9604d91b226f1246cebe7e0
SHA1

6bae51d808187440c40ee3b4230da10883708dba
SHA256

01fb09e3744a9415226877b50a7cc2201036dd7c9cee410e86531a54f52c9177
SHA512

52668f983da48120471f08adf87605a15ed0fdf0018308a48e49a72d6e640dad19e326dd354dc8ad3c0d8bb77b4aa37b288d906cf921af1f6330186b5cd2532b
SSDEEP

6144:t/MCzoZLwW32N9OQCiGrVvR01TI2/Q0u1nAu:tfscfNtCjHkx/mAu

Score

N/A

Malware Config

Signatures

Files

01fb09e3744a9415226877b50a7cc2201036dd7c9cee410e86531a54f52c9177
.dll windows x86

db4835ba34b5aa791782c6b3c95e92de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
SetFileTime
GetFileTime
GetCurrentProcessId
Sleep
GetTempPathA
GetTempPathW
GetFileSize
GetDiskFreeSpaceA
GetLastError
InitializeCriticalSection
SetFilePointer
GetPrivateProfileStringA
ResumeThread
SetThreadPriority
TerminateThread
DisableThreadLibraryCalls
DeleteFileA
DeleteFileW
MoveFileA
MoveFileW
CopyFileA
CopyFileW
SetFileAttributesA
SetFileAttributesW
GetModuleHandleA
GetTickCount
MultiByteToWideChar
MulDiv
LoadLibraryA
CreateThread
WaitForSingleObject
GetVersionExA
DeleteCriticalSection
FreeLibrary
FindClose
CreateFileA
GetModuleFileNameA
ReadFile
WriteFile
GetLocalTime
CloseHandle
WideCharToMultiByte
FindNextFileW
FindFirstFileW
GetProcAddress
CreateFileW

user32

GetDC
SetTimer
LoadBitmapA
SetDlgItemTextA
KillTimer
RedrawWindow
GetWindowLongA
GetParent
SetWindowLongA
SendMessageA
SetWindowTextA
GetDlgItem
GetWindowTextA
wsprintfA
DialogBoxParamA
RegisterClassA
EndDialog
GetWindowTextLengthA
LoadCursorA
DefWindowProcA
ReleaseDC
DrawEdge
GetWindowTextW
GetClientRect
DialogBoxParamW
CreateDialogParamW
CreateDialogParamA
IsWindowEnabled
GetMessageA
CreateWindowExA
SendMessageW
EnableWindow
GetSystemMetrics
GetWindowRect
DestroyWindow
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetActiveWindow
SetDlgItemTextW
SetWindowPos
ShowWindow
PostMessageA
GetDlgItemInt
SetDlgItemInt
MessageBoxA
SendDlgItemMessageA
GetWindowTextLengthW
SetWindowTextW

gdi32

TextOutA
SelectObject
CreateCompatibleDC
SetTextAlign
SetBkMode
DeleteDC
BitBlt
GetObjectA
SetTextColor
CreateFontIndirectA
DeleteObject
GetStockObject

comdlg32

ChooseFontA

advapi32

RegQueryValueExW
RegDeleteValueA
RegSetValueExW
RegQueryValueExA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueExA

shell32

SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA

msvcrt

realloc
toupper
tolower
wcstol
_strdup
_wcsnicmp
_wcsdup
_wcsicmp
_stricmp
_adjust_fdiv
_initterm
_onexit
__dllonexit
frexp
cos
sin
exit
ldexp
fabs
qsort
sqrt
ceil
log
floor
exp
atan
memchr
memmove
strcmp
sprintf
calloc
rand
_ftol
_itoa
_strnicmp
pow
wcscmp
atof
_errno
vswprintf
memcmp
_purecall
abs
vsprintf
tanh
strcat
time
strncpy
strcpy
strrchr
strlen
strstr
malloc
free
??2@YAPAXI@Z
wcslen
memset
??3@YAXPAX@Z
atoi
iswalnum
swprintf
wcsstr
__CxxFrameHandler
strchr
strncmp
memcpy

Exports

Exports

winampGetExtendedFileInfo
winampGetInModule2
winampSetExtendedFileInfo
winampWriteExtendedFileInfo

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

db4835ba34b5aa791782c6b3c95e92de

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

msvcrt

Exports

Exports

Sections

.text Size: 111KB - Virtual size: 111KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 67KB - Virtual size: 70KB

.rsrc Size: 25KB - Virtual size: 25KB

.reloc Size: 6KB - Virtual size: 6KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 111KB - Virtual size: 111KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 67KB - Virtual size: 70KB

.rsrc
Size: 25KB - Virtual size: 25KB

.reloc
Size: 6KB - Virtual size: 6KB

.rmnet
Size: 56KB - Virtual size: 60KB