b1a80c26b8ab2344dcf3b40934b644f46fd9cf121447beeee68f9ee7f2fdda48

Sharing

Copy URL

Twitter E-mail

General

Target

b1a80c26b8ab2344dcf3b40934b644f46fd9cf121447beeee68f9ee7f2fdda48
Size

252KB
MD5

a2728fe453b78c07eddfc4ba804879c0
SHA1

8eb488ae1ca4e9378d5e37c4cbd487304546a37d
SHA256

b1a80c26b8ab2344dcf3b40934b644f46fd9cf121447beeee68f9ee7f2fdda48
SHA512

b8f864e123193c0d30aeb27844d996a05a792690677e90e025038b0bcc8a9e8e4a4fd3a98be1b87b9f9ac254ba1da9e44f10aa8ea5476fea63fe1176d99a3a21
SSDEEP

6144:wFQNjxfCSjMiUH/W72WI4aW9Val0Sx7ePF5I2L:uQN9MjfWYEValMFrL

Score

N/A

Malware Config

Signatures

Files

b1a80c26b8ab2344dcf3b40934b644f46fd9cf121447beeee68f9ee7f2fdda48
.dll windows x86

63962d001270087ac28fb138d6126918

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord2725
ord6394
ord5450
ord6383
ord5440
ord3663
ord559
ord541
ord6144
ord5862
ord812
ord801
ord6662
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord5773
ord551
ord550
ord3337
ord4204
ord6385
ord535
ord926
ord924
ord825
ord2764
ord6663
ord4278
ord858
ord860
ord537
ord1200
ord3318
ord5442
ord354
ord5186
ord1979
ord665
ord540
ord2818
ord2915
ord800
ord823
ord6877
ord5710
ord4129
ord5860
ord6142
ord3811
ord269
ord826
ord600
ord1578
ord6467
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord1116
ord4202
ord939
ord500
ord772
ord2820
ord2614

msvcrt

memmove
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
_onexit
__dllonexit
strncpy
atoi
swprintf
time
srand
rand
_strlwr
strtoul
strstr
__CxxFrameHandler
sprintf
_CxxThrowException
strncmp
_mbsicmp
toupper
_mbscmp
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
wcscpy
wcslen
_ftol

kernel32

lstrlenA
GetLastError
OutputDebugStringA
LocalAlloc
LocalFree
GetFileSize
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
SetFileAttributesA
ReadFile
GetSystemDirectoryA
WriteFile
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteFileA
GetLogicalDrives
GetDriveTypeA
DeviceIoControl
CreateFileA
CloseHandle
GetVersionExA

user32

SendMessageA
wsprintfA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA

ole32

CoInitialize
OleRun
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString

mtdes

fnMTDESSetKey
fnMTDESInit
fnMTDESDoEncrypt
fnMTDESDoDecrypt

msvcp60

?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??_7out_of_range@std@@6B@
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z

Exports

Exports

TestApi
fnXSYNCCltCheckLicenseFile
fnXSYNCCltDLCancel
fnXSYNCCltDRMConversion
fnXSYNCCltDownLoadCancel
fnXSYNCCltFiletoDev
fnXSYNCCltFiletoMemClose
fnXSYNCCltFiletoMemCvt
fnXSYNCCltFiletoMemInit
fnXSYNCCltGetMP3PNum
fnXSYNCCltGetMP3pInfo
fnXSYNCCltGetMTPFileList
fnXSYNCCltGetMTPFileNum
fnXSYNCCltInit
fnXSYNCCltMAContMP
fnXSYNCCltMakeLicenseFile
fnXSYNCCltMemtoDevClose
fnXSYNCCltMemtoDevCvt
fnXSYNCCltMemtoDevInit
fnXSYNCCltMemtoMemClose
fnXSYNCCltMemtoMemCvt
fnXSYNCCltMemtoMemInit
fnXSYNCCltSetCnstDur
fnXSYNCCltSetCnstDurWithDate
fnXSYNCCltSetCnstSubscription
fnXSYNCCltSetRealTime
fnXSYNCCltUpdateFile

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

63962d001270087ac28fb138d6126918

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

ole32

oleaut32

mtdes

msvcp60

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 84KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 8KB - Virtual size: 25KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 8KB - Virtual size: 7KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 88KB - Virtual size: 84KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 8KB - Virtual size: 25KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 112KB - Virtual size: 112KB