b5f819677ebeb2c680fe4a14381ee8fe97d211d717361e9486e7820d69ab52bf

Sharing

Copy URL Twitter E-mail

General

Target

b5f819677ebeb2c680fe4a14381ee8fe97d211d717361e9486e7820d69ab52bf
Size

132KB
MD5

6353c1cf1641b8b66ab558ded8f20799
SHA1

24255c07baf1e8dd50fe9c0ffe1e811ec7a701d5
SHA256

b5f819677ebeb2c680fe4a14381ee8fe97d211d717361e9486e7820d69ab52bf
SHA512

c37ec55b5461e483b2de2b98bfba611d14d2799a2505b44d8ee10f77db49fa013427f44dc25b35c338cb90d4079cdb6c2235400573ba2140b4251e04af0e26be
SSDEEP

1536:u0LN++M2cDTH/gmh3dO4V+SKDFC/XOWeH2674WGZ9E5lEHVGGc9sWjcdetOGokLe:vN++M2sh3dKJCPd674pzIOUokKKK

Score

N/A

Malware Config

Signatures

Files

b5f819677ebeb2c680fe4a14381ee8fe97d211d717361e9486e7820d69ab52bf
.dll windows x86

fd19433ef0f0cf5d6fca3f7efd735afd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libogg

ogg_stream_flush
ogg_stream_pageout
ogg_stream_packetin
ogg_stream_reset
ogg_sync_reset
ogg_page_serialno
ogg_page_granulepos
ogg_page_continued
ogg_stream_packetout
ogg_stream_pagein
ogg_sync_pageseek
ogg_sync_wrote
ogg_sync_buffer
ogg_sync_clear
ogg_sync_init
ogg_page_bos
ogg_stream_clear
ogg_stream_init

kernel32

GetOEMCP
SetEnvironmentVariableA
SetEndOfFile
CreateFileW
HeapSize
GetTimeZoneInformation
WriteConsoleW
LCMapStringW
CompareStringW
GetStringTypeW
OutputDebugStringW
LoadLibraryExW
GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
ReadFile
FileTimeToLocalFileTime
GetFileInformationByHandle
GetFileType
PeekNamedPipe
FileTimeToSystemTime
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetCurrentThreadId
GetProcessHeap
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameW
IsDebuggerPresent
IsProcessorFeaturePresent
CloseHandle
RtlUnwind
IsValidCodePage
GetACP
GetCPInfo
SetLastError
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
ReadConsoleW
SetFilePointerEx
GetStartupInfoW
SetStdHandle
RaiseException
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW

Exports

Exports

oggz_close
oggz_comment_add
oggz_comment_add_byname
oggz_comment_first
oggz_comment_first_byname
oggz_comment_get_vendor
oggz_comment_next
oggz_comment_next_byname
oggz_comment_remove
oggz_comment_remove_byname
oggz_comment_set_vendor
oggz_comments_copy
oggz_comments_generate
oggz_flush
oggz_get_bos
oggz_get_eos
oggz_get_granulerate
oggz_get_granuleshift
oggz_get_numtracks
oggz_io_get_flush_user_handle
oggz_io_get_read_user_handle
oggz_io_get_seek_user_handle
oggz_io_get_tell_user_handle
oggz_io_get_write_user_handle
oggz_io_set_flush
oggz_io_set_read
oggz_io_set_seek
oggz_io_set_tell
oggz_io_set_write
oggz_new
oggz_open
oggz_open_stdio
oggz_purge
oggz_read
oggz_read_input
oggz_run
oggz_run_set_blocksize
oggz_seek
oggz_seek_units
oggz_serialno_new
oggz_set_data_start
oggz_set_granulerate
oggz_set_granuleshift
oggz_set_metric
oggz_set_metric_linear
oggz_set_read_callback
oggz_set_read_page
oggz_stream_get_content
oggz_stream_get_content_type
oggz_stream_get_numheaders
oggz_table_delete
oggz_table_insert
oggz_table_lookup
oggz_table_new
oggz_table_nth
oggz_table_remove
oggz_table_size
oggz_tell
oggz_tell_granulepos
oggz_tell_units
oggz_write
oggz_write_feed
oggz_write_get_next_page_size
oggz_write_output
oggz_write_set_hungry_callback
ot_fprint_bytes
ot_fprint_granulepos
ot_fprint_time
ot_init
ot_page_identify
ot_print_bitrate
ot_print_short_options

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd19433ef0f0cf5d6fca3f7efd735afd

Headers

DLL Characteristics

File Characteristics

Imports

libogg

kernel32

Exports

Exports

Sections

.text Size: 97KB - Virtual size: 96KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 97KB - Virtual size: 96KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 4KB