18841c083700e07cbfa1d9aebeddf2f9d8e67aa01d033f6c7b02d96ba27af824

Sharing

Copy URL

Twitter E-mail

General

Target

18841c083700e07cbfa1d9aebeddf2f9d8e67aa01d033f6c7b02d96ba27af824
Size

316KB
MD5

b1c432901ece4f810a446917d1617920
SHA1

8350dd9f9567453b0642bc5520bd7008dfaa41fe
SHA256

18841c083700e07cbfa1d9aebeddf2f9d8e67aa01d033f6c7b02d96ba27af824
SHA512

cef3afb11e35bf8de03e5fc4a98829a19450ed358b46cd484d6a6c2ccf4293f76dcf1d6ba8c779ff6885f308c887321fb908e5db8c050099c3519a867144ea8d
SSDEEP

6144:PlrYBYQ6XSeMlDvfp/BjPpYefyIWxJLUqYlthluuHoyJcrqAw:NrYBpDlxYuC2jlux/GL

Score

N/A

Malware Config

Signatures

Files

18841c083700e07cbfa1d9aebeddf2f9d8e67aa01d033f6c7b02d96ba27af824
.dll windows x86

377f7f5af5fb76f71ca0e50b429159d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cpdmanageru

?GetManufacturer@CPDManager@@QAE?AVCString@@H@Z
?GetDescription@CPDManager@@QAE?AVCString@@H@Z
?GetDeviceID@CPDManager@@QAE?AVCString@@H@Z
?GetAllDevices@CPDManager@@QAEHXZ
?Close@CPDManager@@QAEXXZ
?ResetDevice@CPDManager@@QAEHXZ
?ReceiveFile@CPDManager@@QAEHVCString@@0H@Z
?GetFiles@CPDManager@@QAEHAAVCObArray@@VCString@@HV3@@Z
?GetFriendlyName@CPDManager@@QAE?AVCString@@H@Z
?CreateDirectoryW@CPDManager@@QAEHVCString@@@Z
?DeleteFileW@CPDManager@@QAEHVCString@@@Z
?GetError@CPDManager@@QAEHXZ
?SendAudioFile@CPDManager@@QAEHVCString@@0PAVCMusicContentProperty@@H@Z
?GetStorageSize@CPDManager@@QAEHVCString@@AA_K1@Z
?Cancel@CPDManager@@QAEXXZ
?IsSupportMTP@CPDManager@@QAEHXZ
?Open@CPDManager@@QAEHH@Z
?GetDeviceNames@CPDManager@@QAEHAAVCStringArray@@@Z
?SetDeviceName@CPDManager@@QAEXVCString@@@Z
?SetCallback@CPDManager@@QAEXP6AXVCString@@HH@Z@Z
??1CPDManager@@UAE@XZ
?SendFile@CPDManager@@QAEHVCString@@0H@Z
??0CPDManager@@QAE@ABVCStringArray@@H@Z

gracenotemgr

GN_InitThread
GN_ReadFileItem_Info
GN_ExitThread

gracenotedata

??_7CFileProp@@6B@
??0CFileProp@@QAE@XZ
??1CPCMLDBFields@@UAE@XZ
??1CFileItem_Info@@UAE@XZ
??0CPCMLDBFields@@QAE@XZ
??0CID3TagFields@@QAE@XZ
??_7CFileItem_Info@@6B@
??1CFileProp@@UAE@XZ
??1CID3TagFields@@UAE@XZ

multilangdllexu

?_tnstr_getstring@CMultiLangEx@@SA?AVCString@@PBG0I@Z

mfc42u

ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord2717
ord4074
ord4692
ord5303
ord5285
ord5710
ord3948
ord2977
ord3142
ord3254
ord4459
ord3131
ord3257
ord2980
ord3076
ord2971
ord3825
ord3826
ord3820
ord3074
ord4075
ord4616
ord4418
ord3733
ord561
ord815
ord6466
ord1105
ord713
ord801
ord5857
ord414
ord541
ord859
ord4199
ord6874
ord6137
ord6139
ord1165
ord6919
ord3314
ord2773
ord2762
ord1972
ord5706
ord356
ord4197
ord2912
ord1989
ord2800
ord964
ord6313
ord4177
ord6388
ord5444
ord3313
ord6006
ord940
ord2598
ord3175
ord3178
ord3171
ord3506
ord5727
ord533
ord5188
ord5568
ord2914
ord5462
ord6381
ord4272
ord860
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord5679
ord4273
ord927
ord3658
ord540
ord538
ord800
ord2385
ord922
ord798
ord825
ord1863
ord2504
ord2546
ord4480
ord6371
ord4269
ord537
ord5641
ord5579
ord6655
ord6654
ord6640
ord5855
ord942
ord2756
ord2606
ord6868
ord535
ord4124
ord823
ord861
ord5929
ord2910
ord858
ord2810
ord3719
ord925
ord5774
ord1570
ord1568
ord1173
ord668
ord1115

msvcrt

_wtoi
fgets
fgetws
_mbschr
wcschr
_CxxThrowException
wcslen
wcscmp
__CxxFrameHandler
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??1type_info@@UAE@XZ
_ftol

kernel32

LocalFree
GetPrivateProfileStringW
GetModuleFileNameW
GetACP
MultiByteToWideChar
GetPrivateProfileIntW
FindFirstFileW
FindClose
CreateDirectoryW
WideCharToMultiByte
CopyFileW
DeleteFileW
CreateFileW
CloseHandle
GetLastError
LocalAlloc

user32

PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
MsgWaitForMultipleObjects

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

msvcp60

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

Exports

Exports

MTP_AddMusicItemToPL
MTP_AddPlayList
MTP_Cancel_Transfer
MTP_ConnectDevice
MTP_DeleteMusicFile
MTP_DeleteMusicItemToPL
MTP_DeletePlayList
MTP_DisconnectDevice
MTP_ExitInstance
MTP_GetAllFilePath
MTP_GetConnectDeviceType
MTP_GetConnectedDevType
MTP_GetDeviceAlphaName
MTP_GetDeviceName
MTP_GetDeviceRoot
MTP_GetLastError
MTP_GetLastErrorString
MTP_GetMemorySize
MTP_GetPhoneItem
MTP_GetPhonePLList
MTP_IsConnected
MTP_IsExistPL
MTP_IsTransferring
MTP_RecievToMusicFile
MTP_RenameMusicPlayList
MTP_ResetDevice
MTP_SendToMusicFile
MTP_SetCallback
MTP_SetDeviceIdx
MTP_SetModelType

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

377f7f5af5fb76f71ca0e50b429159d8

Headers

File Characteristics

Imports

cpdmanageru

gracenotemgr

gracenotedata

multilangdllexu

mfc42u

msvcrt

kernel32

user32

advapi32

msvcp60

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 6KB

.text Size: 220KB - Virtual size: 220KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 220KB - Virtual size: 220KB