winampDSPGetHeader2
Static task
static1
Behavioral task
behavioral1
Sample
9ffc67b3f0b49e35357ee68dc59d074e38035c4d34476170c4610c131d4a7e22.dll
Resource
win7-20220901-en
General
-
Target
9ffc67b3f0b49e35357ee68dc59d074e38035c4d34476170c4610c131d4a7e22
-
Size
231KB
-
MD5
00d354ce7ce7e61c0288f0970f5bf2d0
-
SHA1
fc05475d7f0e20dbefbdf3c7637004fb66b9e63d
-
SHA256
9ffc67b3f0b49e35357ee68dc59d074e38035c4d34476170c4610c131d4a7e22
-
SHA512
7be7233bb2660bfb22460eef2ec72c59cafff6a326c6d0122fc6b2ff8b751f69d5f5b068e4dcd6d23f67d2e30ff00c078353e022e0afa38b01fcdda3ba6209d8
-
SSDEEP
3072:+sGwxP7Ghb+GgJ2r1fHZF8+T7+B84TZpxGAtl5a6YsbGHWSlE5t6ZoiLCmGK9cO:pBQ+aVXMB84TZhtusbA3OEIK9
Malware Config
Signatures
Files
-
9ffc67b3f0b49e35357ee68dc59d074e38035c4d34476170c4610c131d4a7e22.dll windows x86
eda5555b23e8d2c2e503d31faf3e7c33
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
lstrlenA
GetModuleFileNameA
WritePrivateProfileStringA
GetPrivateProfileIntA
LCMapStringA
MultiByteToWideChar
CloseHandle
LoadLibraryA
FlushFileBuffers
VirtualAlloc
RtlUnwind
VirtualFree
GetProcAddress
GetModuleHandleA
GetLastError
SetFilePointer
GetStdHandle
WriteFile
WideCharToMultiByte
lstrcatA
GetStringTypeW
LCMapStringW
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
SetStdHandle
HeapAlloc
HeapFree
user32
ShowWindow
CreateDialogParamA
DestroyWindow
LoadIconA
GetDlgCtrlID
SendMessageA
MoveWindow
GetWindowPlacement
GetWindowRect
SendDlgItemMessageA
MessageBoxA
Exports
Exports
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE