47e31ed37b561398b8440323264f66fa8c9051bda0f7b112312db0cb9f579d58

Sharing

Copy URL

Twitter E-mail

General

Target

47e31ed37b561398b8440323264f66fa8c9051bda0f7b112312db0cb9f579d58
Size

153KB
MD5

15b0a6abf11b4dac194f898b680ae830
SHA1

cbf9f1c94ef9ae038b9a0fc57a487cbd8ba17917
SHA256

47e31ed37b561398b8440323264f66fa8c9051bda0f7b112312db0cb9f579d58
SHA512

4ae0751d852d33758bc16206af024f5702dc64ae1db60a81a4128acb0b43f225c6fb8da66c47069207b3dce6013e8189342c09e5da59a6674ab6948c7faddf02
SSDEEP

3072:8EBWw3m3JjQ4SGUsK7s8ZQcJ+6A4gVfAXKMsz/BJWOn4Q8GsZNco1/fzqLqQD:8qTm3JjQFsK7s8mcQZJWOn4JNHhfWLqE

Score

N/A

Malware Config

Signatures

Files

47e31ed37b561398b8440323264f66fa8c9051bda0f7b112312db0cb9f579d58
.dll windows x86

080aad02d9faf384aaa00b6c23e84f05

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
Sleep
GetProcAddress
GetLastError
LoadLibraryW
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DisableThreadLibraryCalls
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
LoadLibraryA

amf-core-windesktop

??1AMFPropertyStorageEx@amf@@UAE@XZ
_amf_free@4
_amf_alloc@4
??0AMFPropertyInfoImpl@amf@@QAE@ABV01@@Z
??1AMFPropertyInfoImpl@amf@@UAE@XZ
_amf_atomic_inc@4
_amf_atomic_dec@4
??0AMFPropertyStorageExImpl@amf@@QAE@XZ
?RegisterProperties@AMFPropertyStorageExImpl@amf@@UAG?AW4AMF_RESULT@@PAVAMFPropertyInfoImpl@2@I@Z
?OnPropertyChanged@AMFPropertyStorageExImpl@amf@@UAGXPB_W@Z
?NotifyListeners@AMFPropertyStorageExImpl@amf@@UAGXPB_W@Z
?CopyTo@AMFPropertyStorageExImpl@amf@@UAG?AW4AMF_RESULT@@PAVAMFPropertyStorage@2@_N@Z
?GetPropertyCount@AMFPropertyStorageExImpl@amf@@UAGHXZ
?GetProperty@AMFPropertyStorageExImpl@amf@@UAG?AW4AMF_RESULT@@PB_WPAUAMFVariantStruct@2@@Z
?ValidateProperty@AMFPropertyStorageExImpl@amf@@UAG?AW4AMF_RESULT@@PB_WUAMFVariantStruct@2@PAU42@@Z
?AddTo@AMFPropertyStorageExImpl@amf@@UAG?AW4AMF_RESULT@@PAVAMFPropertyStorage@2@_N1@Z
?Clear@AMFPropertyStorageExImpl@amf@@UAG?AW4AMF_RESULT@@XZ
?UnregisterListener@AMFPropertyStorageExImpl@amf@@UAGXPAVAMFPropertyStorageListener@2@@Z
?HasProperty@AMFPropertyStorageExImpl@amf@@UAG_NPB_W@Z
?GetPropertyInfo@AMFPropertyStorageExImpl@amf@@UAG?AW4AMF_RESULT@@IPAPBUAMFPropertyInfo@2@@Z
?GetPropertyInfo@AMFPropertyStorageExImpl@amf@@UAG?AW4AMF_RESULT@@PB_WPAPBUAMFPropertyInfo@2@@Z
?RegisterListener@AMFPropertyStorageExImpl@amf@@UAGXPAVAMFPropertyStorageListener@2@@Z
?SetProperty@AMFPropertyStorageExImpl@amf@@UAG?AW4AMF_RESULT@@PB_WUAMFVariantStruct@2@@Z
?GetPropertiesInfoCount@AMFPropertyStorageExImpl@amf@@UAGIXZ
?IID@AMFPropertyStorageEx@amf@@SAABUAMFGuid@2@XZ
?AMFVariantChangeType@amf@@YG?AW4AMF_RESULT@@PAUAMFVariantStruct@1@PBU31@W4AMF_VARIANT_TYPE@1@@Z
??_7AMFPropertyStorageEx@amf@@6BAMFPropertyStorage@1@@
??_7AMFPropertyStorageEx@amf@@6BAMFInterface@1@@
??_7AMFPropertyStorageEx@amf@@6B@
?amf_string_formatVA@amf@@YG?AV?$basic_string@_WU?$char_traits@_W@std@@V?$amf_allocator@_W@amf@@@std@@PB_WPAD@Z
AMFAssertsEnabled
??0AMFPropertyInfoImpl@amf@@QAE@PB_W0W4AMF_VARIANT_TYPE@1@W4AMF_PROPERTY_CONTENT_TYPE@1@UAMFVariantStruct@1@33_NPBUAMFEnumDescriptionEntry@1@@Z
??0AMFPropertyStorageEx@amf@@QAE@XZ
?AMFVariantClear@amf@@YG?AW4AMF_RESULT@@PAUAMFVariantStruct@1@@Z
?AMFVariantAssignInt64@amf@@YG?AW4AMF_RESULT@@PAUAMFVariantStruct@1@_J@Z
?AMFVariantAssignBool@amf@@YG?AW4AMF_RESULT@@PAUAMFVariantStruct@1@_N@Z
?AMFVariantCopy@amf@@YG?AW4AMF_RESULT@@PAUAMFVariantStruct@1@PBU31@@Z
?AMFVariantInit@amf@@YG?AW4AMF_RESULT@@PAUAMFVariantStruct@1@@Z
_amf_high_precision_clock@0
??1AMFEvent@amf@@UAE@XZ
??0AMFEvent@amf@@QAE@_N0PB_W@Z
??1AMFMutex@amf@@UAE@XZ
?Unlock@AMFMutex@amf@@UAE_NXZ
?Lock@AMFMutex@amf@@UAE_NK@Z
??0AMFMutex@amf@@QAE@_NPB_W0@Z
?IsValid@AMFMutex@amf@@QAE_NXZ
AMFTraceW
??1AMFPropertyStorageExImpl@amf@@UAE@XZ

msvcp100

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??1_Container_base12@std@@QAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??_7ios_base@std@@6B@
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_BADOFF@std@@3_JB
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$ctype@_W@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ

msvcr100

memset
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_onexit
_lock
__dllonexit
_unlock
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??2@YAPAXI@Z
free
malloc
_purecall
memmove
memcpy
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
__clean_type_info_names_internal

Exports

Exports

AMFCreateEncoderVCEDEM

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

080aad02d9faf384aaa00b6c23e84f05

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

amf-core-windesktop

msvcp100

msvcr100

Exports

Exports

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 6KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 6KB

.rmnet
Size: 56KB - Virtual size: 60KB