eb1d250dbfd85ba1cb214b5929d403dae85f8a6b455cbb88221975782dd9f9e6

Sharing

Copy URL Twitter E-mail

General

Target

eb1d250dbfd85ba1cb214b5929d403dae85f8a6b455cbb88221975782dd9f9e6
Size

74KB
MD5

eb606f1033609e41c95a1d048183c592
SHA1

afcee72af0f439c018c96114f96a80f1046efa59
SHA256

eb1d250dbfd85ba1cb214b5929d403dae85f8a6b455cbb88221975782dd9f9e6
SHA512

228a71fc13ccf57f64d91e9c1faae76d6f09b768748b58058ba0e06bd44babf7fdb14ada780ce51849817db762551d2572d15d757aa7a403b373a7c5501543d4
SSDEEP

1536:SwOJlSUvKqhi35965fXlfmDUa1eT1vApgwkak4j6GVmIVfShZ:SNJQa5i3P6pluDaqaakZGVm0Kv

Score

N/A

Malware Config

Signatures

Files

eb1d250dbfd85ba1cb214b5929d403dae85f8a6b455cbb88221975782dd9f9e6
.dll windows x86

31665cb4e88dda2d2f7d1ffd77691d0b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfW

psapi

GetMappedFileNameW

kernel32

GetModuleHandleW
GetSystemInfo
VirtualAlloc
LoadLibraryA
Sleep
CloseHandle
GetLastError
GetFileSize
lstrcmpiW
lstrlenW
lstrcpyW
UnmapViewOfFile
GetFileAttributesW
GetLogicalDriveStringsW
GetCurrentProcess
MapViewOfFile
CreateFileMappingA
CreateThread
LoadLibraryW
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
ExpandEnvironmentStringsW
CreateProcessW
ReadFile
CreateFileW
WriteFile
SetFileAttributesW
RtlUnwind
RaiseException
EncodePointer
DecodePointer
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
VirtualFree
SetLastError
InterlockedDecrement
GetProcAddress
HeapSize
ExitProcess
GetStdHandle
HeapCreate
HeapDestroy
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
GetStringTypeW
SetFilePointer
WriteConsoleW
SetStdHandle

Exports

Exports

winampGetGeneralPurposePlugin

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31665cb4e88dda2d2f7d1ffd77691d0b

Headers

DLL Characteristics

File Characteristics

Imports

user32

psapi

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 4KB - Virtual size: 12KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 12KB

.reloc
Size: 5KB - Virtual size: 5KB