winampGetOutModule
Static task
static1
Behavioral task
behavioral1
Sample
5bd31d84fc5a8db0840de964e3bf8b36082a220d1d993e8ee4e40d1811081a3d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5bd31d84fc5a8db0840de964e3bf8b36082a220d1d993e8ee4e40d1811081a3d.dll
Resource
win10v2004-20220812-en
General
-
Target
5bd31d84fc5a8db0840de964e3bf8b36082a220d1d993e8ee4e40d1811081a3d
-
Size
75KB
-
MD5
83bd007700de7ba500984825c02a41fb
-
SHA1
7817946a878d66a329bb10443a6692e2e55cd833
-
SHA256
5bd31d84fc5a8db0840de964e3bf8b36082a220d1d993e8ee4e40d1811081a3d
-
SHA512
2e8014c384b41956c6c29107abd16bdb93acf78b0f32be27525fb3bc91bb760a8e737c33dda122831c594000dcc534b2b425716ae423ee37da81226645767ea5
-
SSDEEP
1536:prZnnZZ9oqMOiYrn8Q3+KErxUdCTmJr2sePvJAwf:prZZ7oqMBYr8QOKEruohPvL
Malware Config
Signatures
Files
-
5bd31d84fc5a8db0840de964e3bf8b36082a220d1d993e8ee4e40d1811081a3d.dll windows x86
b9191b8f52d637ddc460ceb482b5a6fb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr90
__dllonexit
strcat
memset
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
memcpy
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
user32
wsprintfA
CheckDlgButton
SendDlgItemMessageA
IsDlgButtonChecked
EndDialog
SetWindowTextA
GetDlgItem
SendMessageA
DialogBoxParamA
MessageBoxA
kernel32
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
DisableThreadLibraryCalls
MulDiv
ResetEvent
SetEvent
WaitForSingleObject
DeleteCriticalSection
CreateEventA
CloseHandle
InitializeCriticalSection
CreateThread
SetThreadPriority
WaitForMultipleObjects
EnterCriticalSection
GetTickCount
LeaveCriticalSection
Sleep
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalAlloc
GlobalFree
FreeLibrary
GetProcAddress
LoadLibraryA
dsound
ord1
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ