21a93dbe9121068ce85c7cc212d47a2a8fab8432ec9c39369cf3336aafd42213

Sharing

Copy URL

Twitter E-mail

General

Target

21a93dbe9121068ce85c7cc212d47a2a8fab8432ec9c39369cf3336aafd42213
Size

472KB
MD5

7ecee0ce49ca1095974796a80f408be2
SHA1

e1866720dd832e415374a34704ddfc722e609d53
SHA256

21a93dbe9121068ce85c7cc212d47a2a8fab8432ec9c39369cf3336aafd42213
SHA512

11bfa2f9a50a97dde4877d414beeccce0d511bc1e3e248bc7d301fc14d57a70ba5e80d692f4c5db42a9f475b2097f3b39af43974942ad0a100cddc791f59390f
SSDEEP

6144:dsVLSCAHHyS/m6HOfhjVbSYa8IcuHadKQ7yeO12eXGL9hzOEh3zg3ylljEzZ:e24pjZSYeM7I0eXO3OEMyllYz

Score

N/A

Malware Config

Signatures

Files

21a93dbe9121068ce85c7cc212d47a2a8fab8432ec9c39369cf3336aafd42213
.dll windows x86

c2463761d09f58e236642066e9bead41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitializeEx
CoUninitialize

kernel32

SuspendThread
ResumeThread
SetThreadPriority
GetThreadPriority
GetCurrentThreadId
GetLastError
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
GetCurrentProcess
CreateEventA
GetPrivateProfileIntA
GetSystemInfo
QueryPerformanceCounter
InitializeCriticalSection
QueryPerformanceFrequency
CloseHandle
WaitForSingleObject
Sleep
SetProcessAffinityMask
GetProcessAffinityMask

user32

PeekMessageA
DispatchMessageA
GetMessageA
PostMessageA
PostThreadMessageA
SetRect

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

avifil32

AVIFileCreateStreamA
AVIFileRelease
AVIFileInit
AVIStreamWrite
AVIStreamRelease
AVIStreamSetFormat
AVIFileOpenA

msvcr71

log10
fgetc
sscanf
_initterm
_adjust_fdiv
_except_handler3
__dllonexit
_onexit
__CppXcptFilter
_purecall
malloc
free
fprintf
fgets
fread
fclose
fopen
fseek
ftell
strncpy
strstr
sprintf
fwrite
rewind
remove
_beginthreadex
__CxxFrameHandler
_endthreadex
srand
rand
time

Exports

Exports

PNCodec_Close
PNCodec_GetIPNUnknown
PNCodec_GetMediaFormats
PNCodec_GetUIName
PNCodec_GetVersion
PNCodec_Input
PNCodec_Open
PNCodec_PreferredMediaFormat
PNCodec_QueryMediaFormat
PNCodec_StreamOpen
PNStream_Close
PNStream_GetIPNUnknown
PNStream_GetInputBufferSize
PNStream_GetProperty
PNStream_GetStreamHeader
PNStream_GetStreamHeaderSize
PNStream_Input
PNStream_OpenSettingsBox
PNStream_SetDataCallback
PNStream_SetOutputPacketSize
PNStream_SetProperty

Sections

.text
Size: 352KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

MMXCODE1
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 1009KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2463761d09f58e236642066e9bead41

Headers

File Characteristics

Imports

ole32

kernel32

user32

advapi32

avifil32

msvcr71

Exports

Exports

Sections

.text Size: 352KB - Virtual size: 349KB

MMXCODE1 Size: 4KB - Virtual size: 1KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 36KB - Virtual size: 1009KB

.data1 Size: 44KB - Virtual size: 40KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 352KB - Virtual size: 349KB

MMXCODE1
Size: 4KB - Virtual size: 1KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 36KB - Virtual size: 1009KB

.data1
Size: 44KB - Virtual size: 40KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 11KB