43630dd43c45ef6554b75e8f91420f5bf33420127429116aba3eb009e637a2dc

Sharing

Copy URL Twitter E-mail

General

Target

43630dd43c45ef6554b75e8f91420f5bf33420127429116aba3eb009e637a2dc
Size

220KB
MD5

9e2a8fc9c1a5666cc605db41ac01bf78
SHA1

ca9fbeaa9dff1f1dd94634bf2b66c85bf8bec6ff
SHA256

43630dd43c45ef6554b75e8f91420f5bf33420127429116aba3eb009e637a2dc
SHA512

2d4310eb6c6c96e64c1f853b5b1113404f0858be2e282e16a0e808b91dfeb1cf5ac12c089202666222b2bcf3abbfeb5c0822f92c300111c416bdd1483a00a33a
SSDEEP

3072:sdegDzCYP3Z+Le7W+fswR+gu1eUywtrjAoPwYQFVhhkLYZsg2QNV:sTDzCsELifso81eUjtrjAoPmzhhzH

Score

N/A

Malware Config

Signatures

Files

43630dd43c45ef6554b75e8f91420f5bf33420127429116aba3eb009e637a2dc
.dll windows x86

46fa6859dcbf8b22813eeb4c769b8fea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreate

encoderinterface

?FinishMultiplex@CRawDataEncoderInterface@@QAEJXZ
?SetDirectDrawInterfaces@CRawDataEncoderInterface@@QAEJPAUIDirectDraw@@PAUIDirectDrawSurface@@@Z
?EncodeOneVideoPicture@CRawDataEncoderInterface@@QAEJ_JK0@Z
?SetOneSubpicture@CRawDataEncoderInterface@@QAEJPAEK_JKK1@Z
??1CRawDataEncoderInterface@@QAE@XZ
?StartMultiplex@CRawDataEncoderInterface@@QAEJXZ
?DoMultiplex@CRawDataEncoderInterface@@QAEJKPAKPAH@Z
??0CRawDataEncoderInterface@@QAE@ABU_stETM_ENCODERINTERFACEPARAMS@@PAJ@Z

dvdauthoring

?TermDVDAuthoring@@YAJPAX0@Z
?SetDVDDiscItem@@YAJPAXPAUstDVDDiscItem@@@Z
?DoDVDAuthoring@@YAJPAXPAUstDVDAuthringParams@@0@Z
?SetDVDFileItem@@YAJPAX0JJPAUstDVDFileItem@@PAUstSubPictureParams@@@Z
?SetDVDMenuItem@@YAJPAXPAUstDVDMenuItem@@@Z
?InitializeSubPictureEncoder@@YAFPAPAX@Z
?EncodeSubPictureUnit@@YAFPAXPBUSubPictureInputData@@PAUSubPictureUnitData@@@Z
?TerminateSubPictureEncoder@@YAXPAX@Z
?InitDVDAuthoring@@YAJPAPAX0@Z

mpgbasic

??4CCustomString@@QAEABU0@QBD@Z
?SetDefault@_ETM_AUDENCSET@@QAEXW4ETM_ENCTYP@@@Z
??1CCustomString@@QAE@XZ
?SetDefault@_ETM_VIDENCSET@@QAEXW4ETM_TVSYSTYP@@W4ETM_ENCTYP@@@Z
??0_ETM_AUDENCSET@@QAE@XZ
??0_ETM_VIDENCSET@@QAE@XZ
??0CCustomString@@QAE@XZ

pxscalingfilter

ChangeScaleKmd

pxthumbnail

ord2

kernel32

LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
lstrcatA
GetVersion
GetFileAttributesA
GetFileTime
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeLibrary
GlobalFlags
WritePrivateProfileStringA
GetProcessVersion
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP
RtlUnwind
HeapFree
HeapAlloc
GetACP
TlsFree
RaiseException
ExitProcess
TerminateProcess
HeapSize
HeapReAlloc
GetTimeZoneInformation
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
LocalFree
GetModuleHandleA
SetLastError
lstrcmpiA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
lstrcpyA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
CreateFileA
GetFileSize
GetLastError
CloseHandle
GetVersionExA
LoadLibraryA
GetProcAddress
FindFirstFileA
FindClose
GetModuleFileNameA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
DeleteFileA
GetCommandLineA

user32

RegisterWindowMessageA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
AdjustWindowRectEx
GetSysColor
LoadIconA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
DestroyMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
UnregisterClassA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
SetCursor
SendMessageA
PostMessageA
PostQuitMessage
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
ClientToScreen
GetParent
SetFocus
IsWindowEnabled
ShowWindow
SetWindowPos
GetDlgCtrlID
GetWindowTextA
GetWindowLongA
GetDlgItem
UnhookWindowsHookEx
GetSystemMetrics
CharUpperA
wsprintfA
GetClientRect
MapWindowPoints
CopyRect
SetRect
OffsetRect
SetWindowLongA
SetWindowTextA
EnableWindow

gdi32

SelectObject
CreateBitmap
GetObjectA
DeleteDC
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
DeleteObject
SetBkColor
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetStockObject
RestoreDC
SaveDC

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

comctl32

ord17

Exports

Exports

DVDAuthoringMid

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46fa6859dcbf8b22813eeb4c769b8fea

Headers

File Characteristics

Imports

ddraw

encoderinterface

dvdauthoring

mpgbasic

pxscalingfilter

pxthumbnail

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 80KB - Virtual size: 91KB

.rsrc Size: 12KB - Virtual size: 8KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 80KB - Virtual size: 91KB

.rsrc
Size: 12KB - Virtual size: 8KB

.reloc
Size: 12KB - Virtual size: 11KB