General

Malware Config

Signatures

Files

• f96ae678eb2eb51baac15d005fc2b0714533d49043f510a7286b73a6256fc617

  .dll windows x86

  c57cdad80bc8d5730a343af1ab3fd0e4

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  ReadFile

  SetFilePointer

  CloseHandle

  GetFileSize

  LocalFree

  GetLastError

  InterlockedExchange

  FreeLibrary

  CompareStringA

  GetModuleHandleA

  GetModuleFileNameA

  GetWindowsDirectoryA

  GetSystemDirectoryA

  LoadLibraryA

  SetLastError

  GetVersionExA

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  ExitProcess

  DeleteCriticalSection

  InitializeCriticalSection

  id3lib

  ??0ID3_Tag@@QAE@PBD@Z

  ??_7ID3_IStreamReader@@6B@

  ?Link@ID3_Tag@@QAEIAAVID3_Reader@@G@Z

  ?GetMp3HeaderInfo@ID3_Tag@@QBEPBUMp3_Headerinfo@@XZ

  ?HasLyrics@ID3_Tag@@QBE_NXZ

  ?HasV2Tag@ID3_Tag@@QBE_NXZ

  ?HasV1Tag@ID3_Tag@@QBE_NXZ

  ?GetFileSize@ID3_Tag@@QBEIXZ

  ??1ID3_IStreamReader@@UAE@XZ

  ?Update@ID3_Tag@@QAEGPAGG@Z

  ??1ID3_Tag@@UAE@XZ

  mfc71lu

  ord764

  ord266

  ord265

  ord762

  ord1168

  ord371

  ord1093

  ord1079

  ord870

  ord577

  ord1472

  ord776

  ord293

  ord4074

  ord4100

  ord5524

  mslur71

  _onexit

  __dllonexit

  _adjust_fdiv

  _initterm

  __security_error_handler

  _except_handler3

  memset

  calloc

  malloc

  free

  _wfopen

  fclose

  __CxxFrameHandler

  memmove

  __CppXcptFilter

  fun_id3tag

  ord31

  ord32

  ord33

  ord4

  ord7

  ord12

  ord22

  ord23

  ord14

  ord24

  ord30

  ord25

  ord16

  ord26

  ord17

  ord27

  ord18

  ord28

  ord9

  ord6

  ord29

  ord8

  ord1

  ord15

  ord13

  mslup71

  ??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z

  ??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z

  Exports

  Exports

  ??0CFunID3Tag@@QAE@XZ

  ??0CMp3Info@@QAE@XZ

  ??1CFunID3Tag@@QAE@XZ

  ??1CMp3Info@@QAE@XZ

  ??4CFunID3Tag@@QAEAAV0@ABV0@@Z

  ??4CMp3Info@@QAEAAV0@ABV0@@Z

  ?GetID3Tag@CMp3Info@@QAEPAVID3_Tag@@XZ

  ?GetMP3Header@CMp3Info@@QAEPBXXZ

  ?GetMusicHeader@CFunID3Tag@@QAEPAU_music_header_t@@XZ

  ?Init@CFunID3Tag@@AAEXXZ

  ?LoadMp3@CFunID3Tag@@QAEHV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z

  ?LoadMp3@CMp3Info@@QAEHV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z

  ?SaveMp3@CFunID3Tag@@QAEHV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@H@Z

  ?SaveMp3@CMp3Info@@QAEHV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@H@Z

  Sections

  .text

  Size: 36KB - Virtual size: 33KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 84KB - Virtual size: 80KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 952B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 880B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 8KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .text

  Size: 172KB - Virtual size: 172KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE