0d5b70c8ffae0ca0848d0091d4e2560cbbb7ee1bb47c4884b69c104eb86065e4

Sharing

Copy URL Twitter E-mail

General

Target

0d5b70c8ffae0ca0848d0091d4e2560cbbb7ee1bb47c4884b69c104eb86065e4
Size

248KB
MD5

340df4a6c21499e6970ea7722c74c49c
SHA1

ab8c3c330d87708810a065338836e347295a1743
SHA256

0d5b70c8ffae0ca0848d0091d4e2560cbbb7ee1bb47c4884b69c104eb86065e4
SHA512

1fac2b980c73e65bd0eb21cc39cee49872bafaa39a90a8c3e96318db8e38232943bf5655dd4f0866a6b0471ec73d4c21f7ba30c1ccda74a1d31c8ef75857440f
SSDEEP

6144:qLZkwXqCV199zm3/nZ3zquHgsOz86ca+Gsd4xzQfSU:3LIP9gPBdgsO3ca+G20zbU

Score

N/A

Malware Config

Signatures

Files

0d5b70c8ffae0ca0848d0091d4e2560cbbb7ee1bb47c4884b69c104eb86065e4
.dll windows x86

9540397b77ad872324314b599805d98c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFindExtensionA
PathFileExistsA
PathRemoveFileSpecA

kernel32

lstrcpyA
WideCharToMultiByte
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
LoadLibraryExA
GetModuleFileNameA
PulseEvent
FindClose
FileTimeToDosDateTime
FindFirstFileA
CreateFileA
GetPrivateProfileStringA
GetTickCount
GetSystemDirectoryA
GetPrivateProfileIntA
WaitForSingleObject
CreateEventA
Sleep
MultiByteToWideChar
GetCurrentThreadId
QueryPerformanceCounter
ExitProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
CloseHandle
lstrlenA
WriteFile
SetFileAttributesA
SetFilePointer
MoveFileA

user32

GetWindowLongA
SetWindowLongA
GetDC
ReleaseDC
SetRect
MessageBoxA
wsprintfA

gdi32

GetDeviceCaps
GetStockObject
GetObjectA

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegFlushKey

shell32

SHGetSpecialFolderPathA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

msvcr71

_adjust_fdiv
__CppXcptFilter
_strnicmp
_initterm
_stricmp
?terminate@@YAXXZ
_onexit
__dllonexit
__security_error_handler
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
free
malloc
??_V@YAXPAX@Z
??_U@YAPAXI@Z
atoi
localtime
time
__CxxFrameHandler
strstr

Exports

Exports

CloseVTR
Close_Caption
Close_FLV4_Encode
ConnectFilters
DSHOW_Close
DSHOW_GetAudioData
DSHOW_GetAudioFormat
DSHOW_GetLength
DSHOW_GetVideoData
DSHOW_GetVideoFormat
DSHOW_Open
DSHOW_OpenW
DSHOW_Reconnect
DSHOW_Seek
DSHOW_SetLogfile
DSHOW_SetState
DSHOW_SetVideoStretchMethod
DSHOW_Set_Caption_Style
GetAudioInfo
GetCaptureState
GetLastCaptureTime
GetVtrInfo
GetVtrLength
GetVtrPlayPos
GetVtrState
OpenVTR
Open_Caption
Open_FLV4_Encode
ReadAudioFrame
ReadCurrentFrame
ReconnectVTR
Save_FLV4_Data
SetMeta_FLV4_Encode
SetVtrPlayPos
SetVtrState
SetWaitOn
Set_Caption_Style
SkipCurrentFrame
Start_Caption
Write_Caption
isNextFrame

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9540397b77ad872324314b599805d98c

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

msvcr71

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 912B

.reloc Size: 4KB - Virtual size: 3KB

.text Size: 168KB - Virtual size: 168KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 912B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 168KB - Virtual size: 168KB