winampDSPGetHeader2
Static task
static1
Behavioral task
behavioral1
Sample
6561cd81671be68f2f57d93ec5fd6beb42216d4140f07905eceea8e6d463d404.dll
Resource
win7-20220812-en
General
-
Target
6561cd81671be68f2f57d93ec5fd6beb42216d4140f07905eceea8e6d463d404
-
Size
380KB
-
MD5
10f9ba2a3f6190ed9f6f1a4f6a349060
-
SHA1
af7e5813c3be6598377522a3c1a80e793ad1ec0c
-
SHA256
6561cd81671be68f2f57d93ec5fd6beb42216d4140f07905eceea8e6d463d404
-
SHA512
3f1ed5d38fef4e451db4c4da36a169fd52bf015fe4b17c3bd7a397c6d94faed48bbed9694f9b933fe663f5990230c5142bd23a913f55a889b9e56a88fae9ad43
-
SSDEEP
6144:I8TmH9jodomNlb2/onJsAmrqtgo/OCMGW6C9XOhPrih3G7ho8URL:I8TmHZoddlMrqdHWtXY+s76RL
Malware Config
Signatures
Files
-
6561cd81671be68f2f57d93ec5fd6beb42216d4140f07905eceea8e6d463d404.dll windows x86
e83cfe7b9f2869e2a8ffbd8654dc445f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_except_handler3
msvcp60
??0ios_base@std@@IAE@XZ
wininet
HttpQueryInfoA
user32
DestroyCursor
gdi32
MoveToEx
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
Exports
Exports
Sections
.text Size: 309KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE