141da16d8cb79f2e4f75ab9495fa2d13c7623a8c77ec3f66016e0b750a49de31

Sharing

Copy URL Twitter E-mail

General

Target

141da16d8cb79f2e4f75ab9495fa2d13c7623a8c77ec3f66016e0b750a49de31
Size

810KB
MD5

9149ecee5c58d41c8e50118da3115960
SHA1

51a7fe921c5377c73d48f6f55f683df27686780b
SHA256

141da16d8cb79f2e4f75ab9495fa2d13c7623a8c77ec3f66016e0b750a49de31
SHA512

08ca6027cb9a6400db5591cec20991147e295166fe79db054fb8c647c248337320d1776cc6ece71e1218111af2031a8255a98d65e527cb1cfa9a60ec02a92a4c
SSDEEP

12288:YSYbn3Y4xPLw1Y/bfBROjkVyM08gSx3cFYGXGpiKkfYtt9szsFv:O3Y4ZsY/bfHOjkVyMxgEsw4KkfUt9GC

Score

N/A

Malware Config

Signatures

Files

141da16d8cb79f2e4f75ab9495fa2d13c7623a8c77ec3f66016e0b750a49de31
.dll windows x86

44df4159226f861e8c64b711b06ada1b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
QueryPerformanceFrequency
WaitForMultipleObjects
CreateEventW
ResetEvent
InterlockedIncrement
InterlockedDecrement
GetVersionExW
WaitForSingleObject
HeapAlloc
HeapFree
GetProcessHeap
Sleep
GetTickCount
GetCurrentThread
SetThreadPriority
GetLastError
CloseHandle
SetEvent
GetSystemInfo
GetSystemTimeAsFileTime
TlsAlloc
TlsFree
TlsGetValue
GetCurrentProcessId
OpenEventA
TlsSetValue
ResumeThread
SystemTimeToFileTime
SetWaitableTimer
CreateWaitableTimerA
CreateEventA
InterlockedExchange
InterlockedCompareExchange
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LoadLibraryW
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent

user32

GetDesktopWindow

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW

ole32

CoTaskMemFree
CoCreateInstance

msvcp90

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

pluginkernel

ord2

msvcr90

_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
fwrite
vfprintf
fread
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
exit
fprintf
__iob_func
calloc
_CxxThrowException
__CxxFrameHandler3
_gmtime64
memmove
free
realloc
??8type_info@@QBE_NABV0@@Z
memmove_s
_invalid_parameter_noinfo
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
sprintf
_snprintf
_vsnprintf
_wfopen
__libm_sse2_log10
__libm_sse2_exp
__libm_sse2_atan2
__libm_sse2_log
_CIfmod
__libm_sse2_pow
__libm_sse2_cos
_beginthreadex
memset
malloc
memcpy
_CIsqrt
_CIpow
_CIsin
_CIcos
_CIlog10
qsort
_CIlog
floor
_CIatan
_CIexp
_CItanh
fclose
fflush
fseek
_CIacos

dsound

ord3
ord8
ord11
ord12

audiohost

_DestoryAudioHost@4
_CreateAudioHostEx@8

Exports

Exports

opus_decode
opus_decode_float
opus_decoder_create
opus_decoder_ctl
opus_decoder_destroy
opus_decoder_get_nb_samples
opus_decoder_get_size
opus_decoder_init
opus_encode
opus_encode_float
opus_encoder_create
opus_encoder_ctl
opus_encoder_destroy
opus_encoder_get_size
opus_encoder_init
opus_get_version_string
opus_packet_get_bandwidth
opus_packet_get_nb_channels
opus_packet_get_nb_frames
opus_packet_get_nb_samples
opus_packet_get_samples_per_frame
opus_packet_parse
opus_repacketizer_cat
opus_repacketizer_create
opus_repacketizer_destroy
opus_repacketizer_get_nb_frames
opus_repacketizer_get_size
opus_repacketizer_init
opus_repacketizer_out
opus_repacketizer_out_range
opus_strerror

Sections

.text
Size: 565KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 109KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

44df4159226f861e8c64b711b06ada1b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcp90

pluginkernel

msvcr90

dsound

audiohost

Exports

Exports

Sections

.text Size: 565KB - Virtual size: 564KB

.rdata Size: 89KB - Virtual size: 89KB

.data Size: 17KB - Virtual size: 19KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 26KB - Virtual size: 26KB

.text Size: 109KB - Virtual size: 112KB

.text
Size: 565KB - Virtual size: 564KB

.rdata
Size: 89KB - Virtual size: 89KB

.data
Size: 17KB - Virtual size: 19KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 26KB - Virtual size: 26KB

.text
Size: 109KB - Virtual size: 112KB