36eaba1e1425ccd961798894ef679ce03ff7475c9177fd994a94feb492d65292

Sharing

Copy URL Twitter E-mail

General

Target

36eaba1e1425ccd961798894ef679ce03ff7475c9177fd994a94feb492d65292
Size

164KB
MD5

20fdc3ff6bda1ccde87c6a74e89ce4f0
SHA1

650d6e8958ee7a8e1f09db97d1eea6f4ab0ea510
SHA256

36eaba1e1425ccd961798894ef679ce03ff7475c9177fd994a94feb492d65292
SHA512

cc7beff485ae7e355b21153627b700742064c8ca4e7fcc2918a4331bbecf29509b14a1fedddac46890bdf871d1a5e6a02b10c93c33853211175783bab4889de7
SSDEEP

3072:MeBrQMShj3NoBX+7UF6W8JmWgQG80OtxarR9i70GWWKttWqlMXlUa:fBWdb7UFKJmne0Otx/7BWxtlMXl

Score

N/A

Malware Config

Signatures

Files

36eaba1e1425ccd961798894ef679ce03ff7475c9177fd994a94feb492d65292
.dll windows x86

6a2dcfccc88d76fe2c5015ba6d625e4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCombineA
PathFindExtensionW
PathIsURLW

kernel32

GetCurrentThreadId
GetModuleHandleA
CreateThread
SetThreadPriority
ResumeThread
WaitForSingleObject
TerminateThread
lstrcmpA
WritePrivateProfileStructA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileStructA
lstrcpyA
WideCharToMultiByte
MultiByteToWideChar
GetFileSize
GetShortPathNameW
CompareStringW
lstrcpynW
EnterCriticalSection
GetTickCount
GetTempPathA
lstrlenA
lstrcatA
LoadLibraryA
GetProcAddress
FreeLibrary
SetFilePointer
Sleep
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
InterlockedCompareExchange
RaiseException
GetLastError
InterlockedExchange
LocalAlloc
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
MulDiv
DeleteFileA
CloseHandle
GetModuleFileNameA
ReadFile
WriteFile
CreateFileA
lstrcpynA

user32

GetWindowTextLengthA
GetWindowTextA
SendMessageA
KillTimer
DispatchMessageA
GetMessageA
IsZoomed
RegisterClassA
LoadCursorA
ReleaseDC
DrawEdge
GetDC
MessageBoxIndirectW
MessageBoxW
MessageBoxA
MapWindowPoints
GetClientRect
EndDialog
GetParent
SendMessageW
EnumChildWindows
EnableWindow
SetWindowTextW
ValidateRect
SetWindowTextA
wsprintfA
SetDlgItemInt
GetDlgItemTextA
GetWindowRect
IsIconic
GetDlgItemInt
SendDlgItemMessageA
SetWindowPos
GetSystemMetrics
GetDlgItem
ShowWindow
CreateWindowExA
MapDialogRect
SetDlgItemTextA
SetWindowLongA
PostMessageA
DestroyWindow
DefWindowProcA
GetWindowLongA
wsprintfW
SetTimer

gdi32

CreateDIBSection
GetObjectA
SelectObject
CreateCompatibleDC
DeleteObject
DeleteDC
BitBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegQueryValueExA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

msvcr90

_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_vswprintf
_itow
strncmp
_vsnprintf
wcscmp
atoi
strrchr
strstr
_purecall
_itoa
pow
log
wcscat
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
??2@YAPAXI@Z
free
realloc
__CxxFrameHandler3
wcsncpy
log10
tolower
??3@YAXPAX@Z
malloc
memcpy
memcmp
memset
_stricmp
strlen
strcpy
mbstowcs

Exports

Exports

winampGetExtendedFileInfoW
winampGetInModule2

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6a2dcfccc88d76fe2c5015ba6d625e4b

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

advapi32

ole32

msvcr90

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 8KB

.rsrc Size: 15KB - Virtual size: 15KB

.reloc Size: 7KB - Virtual size: 7KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 8KB

.rsrc
Size: 15KB - Virtual size: 15KB

.reloc
Size: 7KB - Virtual size: 7KB

.rmnet
Size: 56KB - Virtual size: 60KB