be9fd2b9cd33c59f2fca5aed36fd128e7b9a3b18d868356a7f286e53487effd6

Sharing

Copy URL

Twitter E-mail

General

Target

be9fd2b9cd33c59f2fca5aed36fd128e7b9a3b18d868356a7f286e53487effd6
Size

140KB
MD5

ae39c4c097ab1ff5380ce8448ff637c0
SHA1

eb329a46ce3ada9c8cfbc7d9a76112edd4dac95b
SHA256

be9fd2b9cd33c59f2fca5aed36fd128e7b9a3b18d868356a7f286e53487effd6
SHA512

3694ac3e30b924555e4dd6d0d3add804953308cbe0072bcc3edda883d36e43ed42cc63a5ea1d88b1f0a4fd63c1472368e2f0a07383bba9c0c7306957859f0eb9
SSDEEP

3072:seOip52il++aERnbNbKpJDOKorkHtYG6yuon:h/ciU+aExbNbcmG6Qn

Score

N/A

Malware Config

Signatures

Files

be9fd2b9cd33c59f2fca5aed36fd128e7b9a3b18d868356a7f286e53487effd6
.dll windows x86

acf86abbf6fccf9800b05be8484cf943

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pncrt

_purecall
_adjust_fdiv
_initterm
_onexit
__dllonexit
realloc
memmove
printf
_mbctype
strstr
_stricmp
atol
_putenv
strtok
strncat
??3@YAXPAX@Z
??2@YAPAXI@Z
_snprintf
malloc
free
sprintf
strncpy
atoi
strrchr
_vsnprintf
strchr

kernel32

SetErrorMode
GetModuleHandleA
FreeLibrary
GetModuleFileNameA
CreateDirectoryA
GetLastError
CreateEventA
lstrlenA
WideCharToMultiByte
lstrlenW
GetTickCount
WritePrivateProfileStringA
CopyFileA
MultiByteToWideChar
CloseHandle
WaitForSingleObject
SetEvent
InterlockedIncrement
GetProcAddress
LoadLibraryA
CreateProcessA
GetVersionExA
InterlockedDecrement
GetSystemInfo
GetVersion

user32

DestroyWindow
KillTimer
SendMessageA
SetWindowLongA
CharNextA
GetSystemMetrics
SetTimer
DefWindowProcA
GetPropA
EnumWindows
PostMessageA
CallWindowProcA
RegisterClassA
CreateWindowExA
DispatchMessageA
PeekMessageA

advapi32

RegCreateKeyA
RegQueryInfoKeyA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA

shell32

ShellExecuteExA

oleaut32

VariantChangeType
SysAllocString
VariantInit
VariantClear

Exports

Exports

Java_JSRealPlayerPlugin_AddToNowPlayingNative_stub
Java_JSRealPlayerPlugin_ClearNowPlaying_stub
Java_JSRealPlayerPlugin_DoAutoUpdateRequest_stub
Java_JSRealPlayerPlugin_GetComponentVersion_stub
Java_JSRealPlayerPlugin_GetInstalledComponents_stub
Java_JSRealPlayerPlugin_GetPlayerPropertyNative_stub
Java_JSRealPlayerPlugin_GetRealPlayerVersion_stub
Java_JSRealPlayerPlugin_HandleAction_stub
Java_JSRealPlayerPlugin_ImportNative_stub
Java_JSRealPlayerPlugin_OpenURLInPlayerBrowserNative_stub
Java_JSRealPlayerPlugin_PlayClipExNative_stub
Java_JSRealPlayerPlugin_PlayClipNative_stub
Java_JSRealPlayerPlugin_SetPlayerPropertyNative_stub
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
NSCanUnload
NSGetFactory
NSRegisterSelf
NSUnregisterSelf
native_JSRealPlayerPlugin_AddToNowPlayingNative
native_JSRealPlayerPlugin_ClearNowPlaying
native_JSRealPlayerPlugin_DoAutoUpdateRequest
native_JSRealPlayerPlugin_GetComponentVersion
native_JSRealPlayerPlugin_GetInstalledComponents
native_JSRealPlayerPlugin_GetPlayerPropertyNative
native_JSRealPlayerPlugin_GetRealPlayerVersion
native_JSRealPlayerPlugin_HandleAction
native_JSRealPlayerPlugin_ImportNative
native_JSRealPlayerPlugin_OpenURLInPlayerBrowserNative
native_JSRealPlayerPlugin_PlayClipExNative
native_JSRealPlayerPlugin_PlayClipNative
native_JSRealPlayerPlugin_SetPlayerPropertyNative
register_JSRealPlayerPlugin
unregister_JSRealPlayerPlugin
unuse_JSRealPlayerPlugin
unuse_netscape_plugin_Plugin
use_JSRealPlayerPlugin
use_netscape_plugin_Plugin

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

acf86abbf6fccf9800b05be8484cf943

Headers

File Characteristics

Imports

pncrt

kernel32

user32

advapi32

shell32

oleaut32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 5KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 5KB

.rmnet
Size: 60KB - Virtual size: 60KB