d5a566140daa93ecdf5cbf434a265ff2a0150f5b98f216af1b93ba6709db2e52

Sharing

Copy URL Twitter E-mail

General

Target

d5a566140daa93ecdf5cbf434a265ff2a0150f5b98f216af1b93ba6709db2e52
Size

192KB
MD5

5033db4dd9144d80ddb2d03a015a6550
SHA1

576e48f5e81b1a865f63881e85f7f3d7397f03de
SHA256

d5a566140daa93ecdf5cbf434a265ff2a0150f5b98f216af1b93ba6709db2e52
SHA512

afc403ebade87df9a99236ade78f28e66ad231e0c7ba85b4ce43e941837f89be8e20af1c7a8ec06b1ac22a4b0466f9a6c94b6fc7eae8206a2d175c0f405b85c9
SSDEEP

6144:HMvVUr+GE8ikgnxPHXyyMUc0yNOXWJdKwB:Hbngn9HlML8WJD

Score

N/A

Malware Config

Signatures

Files

d5a566140daa93ecdf5cbf434a265ff2a0150f5b98f216af1b93ba6709db2e52
.dll windows x86

16d094a650a24f4e2e2ea428ffc54bd7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pncrt

_purecall
_adjust_fdiv
_initterm
_onexit
__dllonexit
realloc
memmove
printf
_mbctype
strstr
_stricmp
atol
_putenv
strtok
strncat
??3@YAXPAX@Z
??2@YAPAXI@Z
_snprintf
malloc
free
sprintf
strncpy
atoi
strrchr
_vsnprintf
strchr

kernel32

SetErrorMode
GetModuleHandleA
FreeLibrary
GetModuleFileNameA
CreateDirectoryA
GetLastError
CreateEventA
lstrlenA
WideCharToMultiByte
lstrlenW
GetTickCount
WritePrivateProfileStringA
CopyFileA
MultiByteToWideChar
CloseHandle
WaitForSingleObject
SetEvent
InterlockedIncrement
GetProcAddress
LoadLibraryA
CreateProcessA
GetSystemInfo
InterlockedDecrement
GetVersionExA
GetVersion

user32

DestroyWindow
KillTimer
SendMessageA
SetWindowLongA
CharNextA
GetSystemMetrics
SetTimer
DefWindowProcA
GetPropA
EnumWindows
PostMessageA
CallWindowProcA
RegisterClassA
CreateWindowExA
DispatchMessageA
PeekMessageA

advapi32

RegCreateKeyA
RegQueryInfoKeyA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA

shell32

ShellExecuteExA

oleaut32

VariantChangeType
SysAllocString
VariantInit
VariantClear

Exports

Exports

Java_JSRealPlayerPlugin_AddToNowPlayingNative_stub
Java_JSRealPlayerPlugin_ClearNowPlaying_stub
Java_JSRealPlayerPlugin_DoAutoUpdateRequest_stub
Java_JSRealPlayerPlugin_GetComponentVersion_stub
Java_JSRealPlayerPlugin_GetInstalledComponents_stub
Java_JSRealPlayerPlugin_GetPlayerPropertyNative_stub
Java_JSRealPlayerPlugin_GetRealPlayerVersion_stub
Java_JSRealPlayerPlugin_HandleAction_stub
Java_JSRealPlayerPlugin_ImportNative_stub
Java_JSRealPlayerPlugin_OpenURLInPlayerBrowserNative_stub
Java_JSRealPlayerPlugin_PlayClipExNative_stub
Java_JSRealPlayerPlugin_PlayClipNative_stub
Java_JSRealPlayerPlugin_SetPlayerPropertyNative_stub
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
NSCanUnload
NSGetFactory
NSRegisterSelf
NSUnregisterSelf
native_JSRealPlayerPlugin_AddToNowPlayingNative
native_JSRealPlayerPlugin_ClearNowPlaying
native_JSRealPlayerPlugin_DoAutoUpdateRequest
native_JSRealPlayerPlugin_GetComponentVersion
native_JSRealPlayerPlugin_GetInstalledComponents
native_JSRealPlayerPlugin_GetPlayerPropertyNative
native_JSRealPlayerPlugin_GetRealPlayerVersion
native_JSRealPlayerPlugin_HandleAction
native_JSRealPlayerPlugin_ImportNative
native_JSRealPlayerPlugin_OpenURLInPlayerBrowserNative
native_JSRealPlayerPlugin_PlayClipExNative
native_JSRealPlayerPlugin_PlayClipNative
native_JSRealPlayerPlugin_SetPlayerPropertyNative
register_JSRealPlayerPlugin
unregister_JSRealPlayerPlugin
unuse_JSRealPlayerPlugin
unuse_netscape_plugin_Plugin
use_JSRealPlayerPlugin
use_netscape_plugin_Plugin

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

16d094a650a24f4e2e2ea428ffc54bd7

Headers

File Characteristics

Imports

pncrt

kernel32

user32

advapi32

shell32

oleaut32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 5KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 5KB

.text
Size: 112KB - Virtual size: 112KB