winampGetInModule2
Static task
static1
Behavioral task
behavioral1
Sample
2d9bf37ec5efe4272f05ca1f834d818865b06bb0182790b11b93a25de3f4f40b.dll
Resource
win7-20220812-en
General
-
Target
2d9bf37ec5efe4272f05ca1f834d818865b06bb0182790b11b93a25de3f4f40b
-
Size
87KB
-
MD5
30c8f2f97ef1bd83f57b918b8f9da0e0
-
SHA1
9bf51545a54a446df2d776f4af49895146a4e318
-
SHA256
2d9bf37ec5efe4272f05ca1f834d818865b06bb0182790b11b93a25de3f4f40b
-
SHA512
c00571c615b0b2354328981409a0a4edfe152b9cd91c5974bc3ab9d74cfe52bd6c64114f6ee3b267d7060e7e4c9c5573da15d1e0edbaf4e1bf4ae6ce51474c6d
-
SSDEEP
1536:gQ3Cu+rDWMMdTS9LLCLQD1pK/IwD1y4jZ5MoPOnehFUBFZfN8mnCLHj:nyu+HW5iL0gwD1rbMlnehCFZ5CTj
Malware Config
Signatures
Files
-
2d9bf37ec5efe4272f05ca1f834d818865b06bb0182790b11b93a25de3f4f40b.dll windows x86
d2b5b7cc51d0d7fc4907424a3f642a42
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
GetModuleFileNameA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetTickCount
GetTempPathA
DeleteFileA
CloseHandle
ReadFile
GetFileSize
CreateFileA
SetFilePointer
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
DisableThreadLibraryCalls
SetThreadPriority
CreateThread
TerminateThread
WaitForSingleObject
MulDiv
user32
SetWindowTextA
GetDlgItemTextA
EndDialog
GetDlgItem
SetDlgItemTextA
SendDlgItemMessageA
MessageBoxA
wsprintfA
SendMessageA
DialogBoxParamA
PostMessageA
msacm32
acmFormatTagDetailsA
acmFormatDetailsA
acmFormatSuggest
acmStreamOpen
acmStreamUnprepareHeader
acmStreamClose
acmStreamConvert
acmStreamPrepareHeader
msvcrt
_stricmp
strlen
atoi
_initterm
strncmp
_adjust_fdiv
_ftol
??2@YAPAXI@Z
__CxxFrameHandler
free
malloc
memcpy
strcpy
memcmp
strrchr
strncpy
memset
??3@YAXPAX@Z
realloc
Exports
Exports
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE