cab482645f55a8c5de6274a0c53cd2743d25e0b114fe2a40be0ad254e7ba1434

Sharing

Copy URL Twitter E-mail

General

Target

cab482645f55a8c5de6274a0c53cd2743d25e0b114fe2a40be0ad254e7ba1434
Size

112KB
MD5

71451983cc6036fcae51be7411fe4c35
SHA1

61783d779f89853425983a879e11831f8c7246e1
SHA256

cab482645f55a8c5de6274a0c53cd2743d25e0b114fe2a40be0ad254e7ba1434
SHA512

41155a2f474b1fd8d078a042a23e8c5799694bca7d5792f99941b59b954e2dbb7cd61ce54b1031a01d3286ce00a47895f22d528a430260f897b54c805ddc3ed5
SSDEEP

1536:ARZszEc8hPjEchNJhpg5KwzmAOgDghanImJtm2w393Xc71My8Vi5VIUS8E9B+:n8hb3Ttg5KwXOYlnLiD3Xy1LdVIUXUk

Score

N/A

Malware Config

Signatures

Files

cab482645f55a8c5de6274a0c53cd2743d25e0b114fe2a40be0ad254e7ba1434
.dll regsvr32 windows x86

22ad0b20cd7d512d927d13dae9aca477

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gipsvoiceenginedll

?GetInterface@GIPSVEVQE@@SAPAV1@PAVGIPSVoiceEngine@@@Z
?GetInterface@GIPSVEVolumeControl@@SAPAV1@PAVGIPSVoiceEngine@@@Z
?GetInterface@GIPSVERTP_RTCP@@SAPAV1@PAVGIPSVoiceEngine@@@Z
?GetInterface@GIPSVENetwork@@SAPAV1@PAVGIPSVoiceEngine@@@Z
?GetInterface@GIPSVEHardware@@SAPAV1@PAVGIPSVoiceEngine@@@Z
?GetInterface@GIPSVEFile@@SAPAV1@PAVGIPSVoiceEngine@@@Z
?GetInterface@GIPSVEExternalMedia@@SAPAV1@PAVGIPSVoiceEngine@@@Z
?GetInterface@GIPSVEDTMF@@SAPAV1@PAVGIPSVoiceEngine@@@Z
?GetInterface@GIPSVECodec@@SAPAV1@PAVGIPSVoiceEngine@@@Z
?GIPSVE_GetInterface@GIPSVEBase@@SAPAV1@PAVGIPSVoiceEngine@@@Z
?Create@GIPSVoiceEngine@@SAPAV1@XZ
?Delete@GIPSVoiceEngine@@SA_NAAPAV1@@Z

msvcrt

_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
wcslen
memset
_snprintf
strlen
memcpy
memcmp
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
_ftol

kernel32

GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
CloseHandle
SetThreadPriority
TerminateThread
CreateThread
ResetEvent
SetEvent
CreateEventA
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreA
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
FreeLibrary
GetProcAddress

ole32

CoInitializeEx
CoLoadLibrary
CoFreeLibrary

oleaut32

SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22ad0b20cd7d512d927d13dae9aca477

Headers

File Characteristics

Imports

gipsvoiceenginedll

msvcrt

kernel32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 992B

.reloc Size: 4KB - Virtual size: 688B

.text
Size: 12KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 992B

.reloc
Size: 4KB - Virtual size: 688B