bd8ef7db9e97c06caab59763ba5e91399a4cc624b22d9a0666e453b4f3621d7d

Sharing

Copy URL Twitter E-mail

General

Target

bd8ef7db9e97c06caab59763ba5e91399a4cc624b22d9a0666e453b4f3621d7d
Size

387KB
MD5

404f743392c40559ecc78fe1de193ea0
SHA1

e549f51c26699174a6a7ce36a8370fc65a77dd3e
SHA256

bd8ef7db9e97c06caab59763ba5e91399a4cc624b22d9a0666e453b4f3621d7d
SHA512

b69f0c3ee180ea93fc974fef715f66789713a0032020a70610aa580fcfbda2e731abeee20d238c7ff7e44c441ddcffc1a44e38437a088a66877f3d2911faddbd
SSDEEP

12288:m987nZg4Gm87w57OD0BY9IbG0KELWlaeCGwkrM:t7nZg4Gm87wFOD0BY9IbG02laeFr

Score

N/A

Malware Config

Signatures

Files

bd8ef7db9e97c06caab59763ba5e91399a4cc624b22d9a0666e453b4f3621d7d
.dll windows x86

b5ebd6939217f1d0d406c5eb84ecd199

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerClose
mixerOpen
mixerGetNumDevs
waveOutGetDevCapsW
waveOutGetNumDevs
waveInGetDevCapsW
mixerGetLineInfoW
mixerGetDevCapsW
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetID
mmioAscend
waveInPrepareHeader
waveOutPrepareHeader
waveOutUnprepareHeader
waveInUnprepareHeader
waveInReset
waveInClose
waveInAddBuffer
waveInStart
waveInOpen
waveOutReset
waveOutClose
waveOutWrite
waveOutOpen
mmioRead
mmioClose
mmioDescend
mmioStringToFOURCCW
mmioOpenW
waveInGetNumDevs

atwbxui8

ord4297
ord4368
ord4140
ord4362
ord3951
ord627
ord618
ord653
ord652
ord683
ord5628
ord5368
ord4867
ord3
ord4281
ord4313
ord3599
ord4336
ord4144
ord4145
ord4143
ord4165
ord4164
ord4160
ord4159
ord4136
ord4146
ord4142
ord4305
ord4149
ord4133
ord3946
ord3678
ord4438
ord3719
ord3835
ord313
ord295
ord367
ord364
ord426
ord4747
ord4745
ord5399
ord5631
ord1843

kernel32

TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedCompareExchange
CreateFileMappingA
GetProcessHeap
HeapAlloc
HeapFree
UnmapViewOfFile
OpenFileMappingA
MapViewOfFile
ResetEvent
GetVersion
lstrcpynW
SetCurrentDirectoryW
SetLastError
GetSystemDefaultLangID
GetCurrentProcess
FlushInstructionCache
lstrlenA
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
GetTickCount
LoadLibraryW
FreeLibrary
OutputDebugStringA
lstrlenW
GetModuleFileNameW
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GetProcAddress
GetModuleHandleW
DisableThreadLibraryCalls
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcpyW
OutputDebugStringW
WaitForSingleObject
InterlockedExchange
CreateEventW
Sleep
SetEvent
CloseHandle
TerminateThread
GetExitCodeThread
SetThreadPriority
GetCurrentThread
LocalFree
LocalAlloc
MulDiv
CreateEventA

user32

GetSystemMetrics
GetDesktopWindow
wsprintfA
RegisterClassExW
DefWindowProcW
GetWindowTextW
DrawTextW
SetWindowRgn
EndDialog
CallWindowProcW
GetSysColor
LoadStringW
LoadCursorW
GetClassInfoExW
MessageBoxW
SetActiveWindow
EnableWindow
ShowWindow
InvalidateRect
ReleaseDC
LoadIconW
EndPaint
BeginPaint
SetWindowTextW
PeekMessageA
PostThreadMessageW
wsprintfW
CreateWindowExW
SetWindowLongW
GetWindowRect
GetClientRect
SetWindowPos
GetDlgItem
GetWindow
GetWindowLongW
DestroyWindow
GetActiveWindow
SendMessageW
CharNextW
UnregisterClassA
GetMessageW
IsChild
DispatchMessageW
TranslateMessage
IsWindow
DialogBoxParamW
GetDC
LoadBitmapW

gdi32

CreateCompatibleDC
LineTo
MoveToEx
CreatePen
Rectangle
GetStockObject
GetTextExtentPoint32W
CreateRoundRectRgn
SetBkMode
SetBkColor
CreateFontW
SetTextColor
SelectObject
GetObjectW
BitBlt
DeleteObject
DeleteDC

advapi32

RegOpenKeyExW
InitializeSecurityDescriptor
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
FreeSid
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW

ole32

CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VarUI4FromStr

msvcr90

memset
vsprintf
??2@YAPAXI@Z
??_V@YAXPAX@Z
memcpy
__CxxFrameHandler3
wcsstr
malloc
memcpy_s
??_U@YAPAXI@Z
_recalloc
wcslen
wcscmp
_purecall
_beginthreadex
wcsrchr
swprintf_s
_itow
free
_CxxThrowException
wcsncpy_s
_endthread
_beginthread
_wtoi
fabs
floor
sin
cos
strcpy
log
log10
exit
pow
memmove
sqrt
_except_handler4_common
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
??3@YAXPAX@Z

Exports

Exports

ATCloseAudio
ATConvertWRAToPCM
ATEditSetCodecProperty
ATGetAudioDeviceInfo
ATGetCodecInfo
ATGetMapHandle
ATGetVolume
ATInitAudio
ATInitConvertWRAtoPCM
ATIsInstanceHere
ATPlay
ATPlayAdjustQueueTime
ATPlayEx
ATPlayExEx
ATPlayPause
ATPlaySetCodecProperty
ATPlayStop
ATRecPause
ATRecStart
ATRecStop
ATRecordAudioCloseSetting
ATRecordAudioDestoryWnd
ATRecordAudioRunSetting
ATRecordAudioRunSetupWizard
ATRecorderGetCodecProperty
ATRecorderGetFrameSize
ATReleaseConvertWRAtoPCM
ATReleaseMem
ATSetAudioNeedFlag
ATSetMapFlag
ATSplitPlay

Sections

.text
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b5ebd6939217f1d0d406c5eb84ecd199

Headers

DLL Characteristics

File Characteristics

Imports

winmm

atwbxui8

kernel32

user32

gdi32

advapi32

ole32

oleaut32

msvcr90

Exports

Exports

Sections

.text Size: 208KB - Virtual size: 208KB

.rdata Size: 38KB - Virtual size: 38KB

.data Size: 36KB - Virtual size: 37KB

.rsrc Size: 38KB - Virtual size: 37KB

.reloc Size: 9KB - Virtual size: 8KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 208KB - Virtual size: 208KB

.rdata
Size: 38KB - Virtual size: 38KB

.data
Size: 36KB - Virtual size: 37KB

.rsrc
Size: 38KB - Virtual size: 37KB

.reloc
Size: 9KB - Virtual size: 8KB

.rmnet
Size: 56KB - Virtual size: 60KB