3468192b62b098a5ad9f18f6718059dd8652517c47303f05380f7f40018ce3b2

Sharing

Copy URL

Twitter E-mail

General

Target

3468192b62b098a5ad9f18f6718059dd8652517c47303f05380f7f40018ce3b2
Size

176KB
MD5

903d660308ec471045978ef0d196e6e0
SHA1

65a4af1f8169a2796db469c9df4614ea96b505ea
SHA256

3468192b62b098a5ad9f18f6718059dd8652517c47303f05380f7f40018ce3b2
SHA512

f3964d872e0aabab1d61e8606c956dac9e4bd4953f4aabc07e2e2e30f55cf3ebb42dfb80fcf7f3130a9b05a30360d8b64a5b459a03ccfdd4372bef3458ad40d1
SSDEEP

3072:Z17GPDy1qqgP//qWnsaIvTjeckExPa/1LzLvEOKrMwjH7rCs:zCDy+iDasnOExPa10OoM+es

Score

N/A

Malware Config

Signatures

Files

3468192b62b098a5ad9f18f6718059dd8652517c47303f05380f7f40018ce3b2
.dll windows x86

e045ebc2f5f78241d2f5176a6406153d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

u32base

RGBToBGR

mfc42

ord825
ord823
ord800
ord540
ord2841
ord3663
ord2107
ord5450
ord5440
ord6383
ord6394
ord1182
ord342
ord1253
ord1168
ord2393

msvcrt

_adjust_fdiv
__CxxFrameHandler
malloc
_initterm
free
_onexit
__dllonexit
??1type_info@@UAE@XZ
_splitpath
_ftol

kernel32

CreateFileA
FreeLibrary
LoadLibraryA
GetPrivateProfileStringA
GetProcAddress
DeleteFileA
GetFileSize
CloseHandle
GetDiskFreeSpaceExA
lstrcpyA
GlobalLock
GlobalAlloc
GlobalHandle
GlobalUnlock
GlobalFree

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

u32video

uVideoFreeSaveFileInfo
uVideoGetFileInfo
uVideoFreeFileInfo
uVideoUnPackSaveData
uVideoPackSaveData
uVideoReadAudioBegin
uVideoReadAudio
uVideoReadAudioEnd
uVideoGetMiscData
uVideoSaveVideo
uVideoSaveAudio
uVideoSetV2S
uVideoReadVideo
uVideoReadVideoBegin
uVideoReadVideoEnd
uVideoEscape
uVideoGetSaveFileInfo
uVideoGetFormatIndex
uVideoSetSettingsBufFromSaveData
uVideoPlayEnd
uVideoPlayAction
uVideoPlayBegin
uVideoExit
uVideoInit

u32misc

ord33

ulibjpg

uJpgFileWrite

Exports

Exports

fnIMPDVDCloseSlideShowVideoFile
fnIMPDVDDualAudioChannelToOneChannel
fnIMPDVDGetVideoFileTotalFrame
fnIMPDVDIsPreviewFileExistInList
fnIMPDVDMaxAllowPreviewFileNum
fnIMPDVDOpenSlideShowVideoFile
fnIMPDVDPlayAction
fnIMPDVDReadSlideShowVideoFrame
fnIMPDVDReadVideoFrame
fnIMPDVDReleasePreviewFile
fnIMPDVDResetReadVideoFile
fnIMPDVDSaveDIBDataToJPGFile
fnIMPDVDSetPreviewFile
fnIMPDVDSetReadVideoFile
fnIMPDVDVIOParamInit
fnIMPDVDVIOParamRelease

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e045ebc2f5f78241d2f5176a6406153d

Headers

File Characteristics

Imports

u32base

mfc42

msvcrt

kernel32

advapi32

u32video

u32misc

ulibjpg

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 580B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 1KB

.text Size: 136KB - Virtual size: 136KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 580B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 136KB - Virtual size: 136KB