c9764cd02faf959c02d6bb1cbeca4ab32483dcfe1eb235e0acb62a2f34228485

Sharing

Copy URL Twitter E-mail

General

Target

c9764cd02faf959c02d6bb1cbeca4ab32483dcfe1eb235e0acb62a2f34228485
Size

232KB
MD5

0262e74d01014702d4293514bb952480
SHA1

0d01cb9ed3671e2e4c17934c027aa49e6113cb71
SHA256

c9764cd02faf959c02d6bb1cbeca4ab32483dcfe1eb235e0acb62a2f34228485
SHA512

c045ebbb2a3a57b0629865bf3a66ba626d3476f37046ca01d9859497e0c6e914c05058ccf8589bb7179de07a8895852fe31cb5d06b2740d117a043f171e7c326
SSDEEP

6144:dHcANyujXTbOtWBKPiE4MeDof9yPi0/H5cM4:dHc+VjXIP4Qf90D/H5cM4

Score

N/A

Malware Config

Signatures

Files

c9764cd02faf959c02d6bb1cbeca4ab32483dcfe1eb235e0acb62a2f34228485
.dll windows x86

6755824bd212e40656faa5a28c933cc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
CompareStringW
TlsGetValue
CreateEventW
TlsAlloc
TlsSetValue
ResetEvent
InterlockedIncrement
InterlockedDecrement
MulDiv
LoadLibraryW
GetProcAddress
FreeLibrary
MultiByteToWideChar
GetPrivateProfileIntA
WritePrivateProfileStringA
GetModuleFileNameA
GlobalAlloc
GlobalFree
WideCharToMultiByte
lstrcmpiW
lstrcpynW
GetModuleHandleW
lstrcpynA
SetErrorMode
SetEvent
DeviceIoControl
GetLastError
GetLogicalDrives
GetDriveTypeW
OutputDebugStringA
OutputDebugStringW
GlobalMemoryStatus
GetLogicalDriveStringsW
GetVersionExW
ResumeThread
LoadLibraryA
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
RaiseException
InterlockedExchange
LocalFree
LocalAlloc
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
CloseHandle
Sleep
WaitForSingleObject
SetThreadPriority
CreateThread
CreateFileW
GetTickCount

user32

DispatchMessageW
EndDialog
SetDlgItemInt
GetWindowTextW
CharLowerW
wsprintfW
GetCursorPos
PtInRect
SendDlgItemMessageW
ReleaseDC
GetDC
GetSysColor
LoadImageW
InvalidateRect
PostMessageW
SetActiveWindow
WaitMessage
IsDialogMessageW
AttachThreadInput
MessageBeep
FlashWindowEx
GetForegroundWindow
GetWindowLongW
GetWindow
IsWindowEnabled
GetDialogBaseUnits
MapDialogRect
SetCursor
EnableWindow
GetDlgItem
CharPrevA
KillTimer
SetForegroundWindow
UpdateWindow
DestroyWindow
SetWindowTextW
ShowWindow
DefWindowProcW
SetPropW
SetWindowLongW
ShowWindowAsync
RemovePropW
CallWindowProcA
CallWindowProcW
GetPropW
UnhookWindowsHookEx
SetWindowsHookExW
PostQuitMessage
CallMsgFilterW
MsgWaitForMultipleObjectsEx
PostThreadMessageW
GetWindowThreadProcessId
CallNextHookEx
SetWindowPos
IsWindowVisible
FindWindowExW
GetClassNameW
EnumWindows
CharNextExA
wsprintfA
CheckDlgButton
IsDlgButtonChecked
MessageBoxA
SetTimer
FillRect
MapWindowPoints
GetWindowRect
GetClientRect
GetParent
GetMonitorInfoW
MonitorFromRect
SetRect
OffsetRect
SendMessageW
GetDesktopWindow
IsWindow
TranslateMessage
IsWindowUnicode
PeekMessageW
SetDlgItemTextW
MessageBoxIndirectW
LoadCursorW

gdi32

CreateCompatibleDC
ExcludeClipRect
RectVisible
DeleteObject
CreateFontIndirectW
GetDeviceCaps
GetObjectW
GetStockObject
DeleteDC
BitBlt
SelectObject

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
SysFreeString

msvcr90

_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_CxxThrowException
??_V@YAXPAX@Z
strcmp
strncpy
strstr
abs
??_U@YAPAXI@Z
strncat
isdigit
_purecall
toupper
_wcsdup
_wcsicmp
_wcsnicmp
_itow
atoi
_strnicmp
_stricmp
??2@YAPAXI@Z
_vsnprintf
strlen
strcpy
memmove
memcmp
_wtoi
wcscmp
_vsnwprintf
free
malloc
??3@YAXPAX@Z
memcpy
memset
_initterm
_except_handler3
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
__CxxFrameHandler3
_encoded_null

shlwapi

PathAppendA
PathRemoveFileSpecA
PathAppendW
PathCombineW
PathFindFileNameW
PathFindExtensionW
PathCombineA

Exports

Exports

winampAddUnifiedFileInfoPane
winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_lasterror
winampGetExtendedRead_open
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6755824bd212e40656faa5a28c933cc4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

msvcr90

shlwapi

Exports

Exports

Sections

.text Size: 70KB - Virtual size: 69KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 1024B - Virtual size: 66KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 6KB - Virtual size: 6KB

.text Size: 132KB - Virtual size: 132KB

.text
Size: 70KB - Virtual size: 69KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 1024B - Virtual size: 66KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 6KB - Virtual size: 6KB

.text
Size: 132KB - Virtual size: 132KB