b36b31c98d0b07f50c75194720e290593435746d961be50ff24fb0ad35b572ee

Sharing

Copy URL Twitter E-mail

General

Target

b36b31c98d0b07f50c75194720e290593435746d961be50ff24fb0ad35b572ee
Size

208KB
MD5

a0ef8002f1b53e1d298b84cde5762b5b
SHA1

3c08e2b3fab5bae688872748a8ba51b48d6641ec
SHA256

b36b31c98d0b07f50c75194720e290593435746d961be50ff24fb0ad35b572ee
SHA512

25eee39d53473b3154eb22cd00126c10d07ef0741adac51a5b42dfc940e24c29077188a3ce3f4be51c7aca5ad8a26c7adc943b4d52c11cc9783246e34ab86899
SSDEEP

3072:8fGX4t+Vsk5UpWGjh7ojzUAq1TFy3KuYBAQGnSz2ytcRIhnlLbBhMkjRIhkmCuqD:8foVskKwrUAOTFyV632ymGlJ+X8Ik

Score

N/A

Malware Config

Signatures

Files

b36b31c98d0b07f50c75194720e290593435746d961be50ff24fb0ad35b572ee
.dll windows x86

bc2a44d98897a9caee5c4f130a87e0b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
MultiByteToWideChar
SetEvent
CloseHandle
WaitForSingleObject
CreateEventA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateProcessA
InterlockedIncrement
InterlockedDecrement
GetSystemInfo
GetVersion
GetModuleFileNameA
SetErrorMode
GetLastError
CreateDirectoryA
WritePrivateProfileStringA
InterlockedExchange
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
ExitProcess
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
WideCharToMultiByte
lstrlenW
GetTickCount

user32

SetTimer
KillTimer
GetSystemMetrics
CharNextA
CharPrevA
CharLowerA
EnumWindows
RegisterClassA
CreateWindowExA
SendMessageA
PeekMessageA
DispatchMessageA
GetPropA
SetWindowLongA
DefWindowProcA
CallWindowProcA
DestroyWindow
PostMessageA

advapi32

RegQueryValueA
RegQueryInfoKeyA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegDeleteValueA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

shell32

ShellExecuteExA

msvcr71

__CppXcptFilter
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_adjust_fdiv
_initterm
memset
__security_error_handler
__dllonexit
_putenv
_onexit
_except_handler3
free
_purecall
_snprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
strncat
strncpy
atoi
sprintf
_stricmp
atol
strtok
strchr
_vsnprintf
strrchr
strstr
_mbctype
??0exception@@QAE@XZ
??1exception@@UAE@XZ
??_U@YAPAXI@Z
??_V@YAXPAX@Z
??0exception@@QAE@ABV0@@Z
_CxxThrowException
printf
memmove
realloc
_ismbcspace
__CxxFrameHandler

oleaut32

VariantChangeType
VariantInit
SysAllocString
VariantClear

msvcp71

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

Exports

Exports

Java_JSRealPlayerPlugin_AddToNowPlayingNative_stub
Java_JSRealPlayerPlugin_ClearNowPlaying_stub
Java_JSRealPlayerPlugin_DoAutoUpdateRequest_stub
Java_JSRealPlayerPlugin_GetComponentVersion_stub
Java_JSRealPlayerPlugin_GetInstalledComponents_stub
Java_JSRealPlayerPlugin_GetPlayerPropertyNative_stub
Java_JSRealPlayerPlugin_GetRealPlayerVersion_stub
Java_JSRealPlayerPlugin_HandleAction_stub
Java_JSRealPlayerPlugin_ImportNative_stub
Java_JSRealPlayerPlugin_OpenURLInPlayerBrowserNative_stub
Java_JSRealPlayerPlugin_PlayClipExNative_stub
Java_JSRealPlayerPlugin_PlayClipNative_stub
Java_JSRealPlayerPlugin_SetPlayerPropertyNative_stub
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
NSCanUnload
NSGetFactory
NSRegisterSelf
NSUnregisterSelf
native_JSRealPlayerPlugin_AddToNowPlayingNative
native_JSRealPlayerPlugin_ClearNowPlaying
native_JSRealPlayerPlugin_DoAutoUpdateRequest
native_JSRealPlayerPlugin_GetComponentVersion
native_JSRealPlayerPlugin_GetInstalledComponents
native_JSRealPlayerPlugin_GetPlayerPropertyNative
native_JSRealPlayerPlugin_GetRealPlayerVersion
native_JSRealPlayerPlugin_HandleAction
native_JSRealPlayerPlugin_ImportNative
native_JSRealPlayerPlugin_OpenURLInPlayerBrowserNative
native_JSRealPlayerPlugin_PlayClipExNative
native_JSRealPlayerPlugin_PlayClipNative
native_JSRealPlayerPlugin_SetPlayerPropertyNative
register_JSRealPlayerPlugin
unregister_JSRealPlayerPlugin
unuse_JSRealPlayerPlugin
unuse_netscape_plugin_Plugin
use_JSRealPlayerPlugin
use_netscape_plugin_Plugin

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bc2a44d98897a9caee5c4f130a87e0b6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcr71

oleaut32

msvcp71

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 6KB

.text Size: 116KB - Virtual size: 116KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 116KB - Virtual size: 116KB