7bc15924e850e2b7894627baf28dae95c900022dc6739b11cd50fc3731d419bd

Sharing

Copy URL Twitter E-mail

General

Target

7bc15924e850e2b7894627baf28dae95c900022dc6739b11cd50fc3731d419bd
Size

349KB
MD5

814684b251eecfff54276cb83647826c
SHA1

0d0b177e20a30f2590f77340fb0055f1cfdd252f
SHA256

7bc15924e850e2b7894627baf28dae95c900022dc6739b11cd50fc3731d419bd
SHA512

533ada8173b00af45b0ab5be37f9928b0c1fbea6d2c1720377c0aa4bb11e57fdacc8a0ceae8b7a97eb412f08b6164b2db63203b1916ce96737355addf8ab7c50
SSDEEP

6144:oNJcRNueDRx6uV/puC9XFkzwWs4Drd4oz+9JrbVsFfvOFSykzofm5R:obssM6uBpuCFFkzDx4oz+9DgAs

Score

N/A

Malware Config

Signatures

Files

7bc15924e850e2b7894627baf28dae95c900022dc6739b11cd50fc3731d419bd
.dll windows x86

9622ae1831b6d102a718bd5e70269ba2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

shlwapi

StrRChrW
PathRemoveFileSpecW
PathIsRootW
PathCombineW
PathCanonicalizeW
PathFileExistsW
PathFindExtensionW
PathIsURLW

nscrt

__CppXcptFilter
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_onexit
__dllonexit
_except_handler3
_CIpow
toupper
_i64tow
log
sqrt
realloc
_wtof
fabs
pow
wcschr
wcstoul
wcscmp
strlen
_wcstoui64
_vsnwprintf
_wcsnicmp
log10
swscanf
_itow
_vsnprintf
calloc
_wtoi
malloc
??1type_info@@UAE@XZ
_strnicmp
_stricmp
wcsstr
_wcsicmp
_wcsdup
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_purecall
memset
memcmp
memcpy
??_V@YAXPAX@Z
??_U@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
memmove
wcslen
_CxxThrowException
free

kernel32

GetTimeFormatW
DeleteFileW
LoadResource
FindResourceExW
GetTempPathW
SetFilePointer
WriteFile
RaiseException
DisableThreadLibraryCalls
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetLocalTime
GlobalMemoryStatus
GetDiskFreeSpaceA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
DeviceIoControl
GetVersionExA
InterlockedCompareExchange
HeapSize
HeapFree
GetProcessHeap
HeapAlloc
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleHandleW
GetVersion
DeleteCriticalSection
SetEvent
WaitForSingleObject
ResetEvent
WritePrivateProfileStringW
GetPrivateProfileIntW
CreateEventW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
InitializeCriticalSection
lstrlenA
lstrcmpiW
GetPrivateProfileStringW
lstrcpynW
QueueUserAPC
WaitForSingleObjectEx
SetThreadPriority
CreateThread
CloseHandle
Sleep
lstrlenW
CompareStringW
MulDiv
WaitForMultipleObjects
lstrcmpW
InterlockedIncrement
InterlockedDecrement
LocalFree
GetTickCount
WritePrivateProfileStructW
GetPrivateProfileStructW
GlobalUnlock
GlobalLock
GlobalAlloc
LocalAlloc
GetCurrentThread
OutputDebugStringA
ReadFile
CreateFileW
GetLastError
LoadLibraryA
GetModuleHandleA
InterlockedExchange
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
CreateEventA

user32

CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
CharPrevW
DefWindowProcW
GetWindowRect
ShowWindow
CopyRect
MessageBoxIndirectA
PeekMessageW
DispatchMessageW
GetSystemMetrics
SystemParametersInfoW
EnumDisplaySettingsW
BeginPaint
ScreenToClient
FillRect
SetWindowPos
SetFocus
GetDlgItemInt
EnableWindow
SendDlgItemMessageW
KillTimer
SetTimer
DestroyWindow
GetClassInfoW
RegisterClassW
CreateWindowExW
MessageBoxW
SendMessageA
GetWindowLongW
EndPaint
IsWindow
GetClientRect
InvalidateRect
ClientToScreen
SetWindowTextW
EndDialog
CheckDlgButton
SetDlgItemInt
IsDlgButtonChecked
GetDlgItemTextW
GetDlgItem
PostMessageW
wsprintfA
wsprintfW
MessageBoxIndirectW
SendMessageW
LoadStringW
SendDlgItemMessageA
PostMessageA
SendNotifyMessageA
MessageBeep
TranslateMessage
IsDialogMessageA
DrawTextW
InflateRect
SetRect
GetSysColorBrush
UpdateWindow
BringWindowToTop
SetForegroundWindow
LoadBitmapW
RegisterWindowMessageA
SetPropW
SetWindowLongA
DialogBoxIndirectParamW
PostQuitMessage
GetMessageW
CreateDialogIndirectParamA
GetParent
CharNextW
SetWindowLongW
CallWindowProcW
SetDlgItemTextW

gdi32

SetBkMode
SetTextColor
CreateDIBSection
DeleteDC
CreateSolidBrush
SelectObject
Rectangle
CreatePen
CreateCompatibleDC
GetStockObject
CreateBrushIndirect
SetPixel
GetPixel
BitBlt
StretchBlt
DeleteObject
RectVisible

advapi32

RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA

ole32

CoTaskMemAlloc
CoUninitialize
CoInitializeEx
CoCreateInstance
CoTaskMemFree

oleaut32

SafeArrayAccessData
SysFreeString
SysAllocString
VariantInit
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayDestroy

Exports

Exports

GetDS
GetWave
burn_doBurn
winampAddUnifiedFileInfoPane
winampClearExtendedFileInfoW
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9622ae1831b6d102a718bd5e70269ba2

Headers

File Characteristics

Imports

comctl32

shlwapi

nscrt

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 222KB - Virtual size: 221KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 8KB - Virtual size: 30KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 18KB - Virtual size: 18KB

.rmnet Size: 59KB - Virtual size: 60KB

.text
Size: 222KB - Virtual size: 221KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 8KB - Virtual size: 30KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 18KB - Virtual size: 18KB

.rmnet
Size: 59KB - Virtual size: 60KB