a5b8a0fe2966ab70048a8b11b00f8c784b58c71c0d1ba914b176a5edb27e0c03

Sharing

Copy URL Twitter E-mail

General

Target

a5b8a0fe2966ab70048a8b11b00f8c784b58c71c0d1ba914b176a5edb27e0c03
Size

87KB
MD5

927a917f66c28c6218f5858dacffb5f0
SHA1

e58f74c55892f132afbba32eb3159c43ecbc15b0
SHA256

a5b8a0fe2966ab70048a8b11b00f8c784b58c71c0d1ba914b176a5edb27e0c03
SHA512

41a1cc9a16b94f3b338a78d36db310a453b25521a6bf137e320a4fadfa90339ce7d4bfdee9ccb9130ae0197dfcf8848d820c4d91f36ff148d2cb1e8c1e1ebda9
SSDEEP

1536:ql6awgbgAHw9qX5tcpmogq2B7JHvqBCsj2WhHiAewQrSdUOlM:Gw+HHw9qMpmNdJHvW4wdj

Score

N/A

Malware Config

Signatures

Files

a5b8a0fe2966ab70048a8b11b00f8c784b58c71c0d1ba914b176a5edb27e0c03
.dll windows x86

f10562093897feae8ad0c1eb0d878921

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
SetEvent
ResetEvent
WaitForMultipleObjects
SetFilePointer
ReadFile
ReleaseSemaphore
InterlockedIncrement
InterlockedDecrement
CreateEventA
WaitForSingleObject
EnterCriticalSection
FreeLibrary
LoadLibraryA
SetThreadPriority
CreateThread
GetLastError
GetProcAddress
GetThreadPriority
GetCurrentThread
GetCurrentProcessId
QueryPerformanceCounter
ExitProcess
LocalAlloc
GetCurrentThreadId
MultiByteToWideChar
lstrlenA
Sleep
GetTickCount
CreateFileA
GetFileSize
CloseHandle
lstrcmpiA
MulDiv
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
InterlockedExchange
lstrcpyA
WritePrivateProfileStringA
lstrcpynA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetSystemTimeAsFileTime

user32

DialogBoxParamA
SetDlgItemTextA
SetTimer
SendDlgItemMessageA
EndDialog
SendMessageA
PostMessageA
CharNextA
MessageBoxA
DestroyWindow
KillTimer
DefWindowProcA
CreateWindowExA
RegisterClassA
PostThreadMessageA
GetQueueStatus
PeekMessageA
MsgWaitForMultipleObjects
RegisterWindowMessageA
DispatchMessageA
CheckDlgButton
GetDlgItemTextA
IsDlgButtonChecked

ole32

CoFreeUnusedLibraries
CoUninitialize
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoInitialize

oleaut32

OleCreatePropertyFrame

nscrt

_strnicmp
_strdup
_vsnprintf
free
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
??_V@YAXPAX@Z
??_U@YAPAXI@Z
memcpy
memset
memcmp
_vsnwprintf
atoi
??2@YAPAXI@Z
realloc
strncmp
??3@YAXPAX@Z
_purecall
__CxxFrameHandler
malloc
_except_handler3
__security_error_handler

shlwapi

PathRemoveExtensionA
PathStripPathA
PathFindExtensionA
PathFindFileNameA

Exports

Exports

winampGetExtendedFileInfo
winampGetInModule2

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f10562093897feae8ad0c1eb0d878921

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

nscrt

shlwapi

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 8KB - Virtual size: 7KB

.rmnet Size: 11KB - Virtual size: 12KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 7KB

.rmnet
Size: 11KB - Virtual size: 12KB