08f677048361bb2778efac1c766d0f54775246b18313bd1c8544a057dc8adc4b

Sharing

Copy URL Twitter E-mail

General

Target

08f677048361bb2778efac1c766d0f54775246b18313bd1c8544a057dc8adc4b
Size

184KB
MD5

798086caf522ed175458ba795a3e2540
SHA1

2c5c8db0902adb17a049c9cc16cc643b2c94cccd
SHA256

08f677048361bb2778efac1c766d0f54775246b18313bd1c8544a057dc8adc4b
SHA512

07825543274bf0293ee927e9bd522fee29404759fbcbf2ad086b1f49e238093dd71ed29c92aeed576ebad62980311d5361daf6d0f40dd4d86174c3dd785a7a5e
SSDEEP

3072:KwC3OCp1PaBxC20GVcV/Hx4HpuEr8tanriuOInDDconXLBms3sHO:cOCXixP0G2V/HxkuEr8QnZOWDvXLsHO

Score

N/A

Malware Config

Signatures

Files

08f677048361bb2778efac1c766d0f54775246b18313bd1c8544a057dc8adc4b
.dll regsvr32 windows x86

7f0349ad6275aab69734b393c6e9ccf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

omgutils

?init@Header@Ea3@@QAEXPBDPAI11@Z
?getOmgcid@Header@Ea3@@QBE_NQAE@Z
?getAt3Param@Header@Ea3@@QBEXAAUParam@At3@@@Z
?code@OMGExceptionImpl@@QBEHXZ
?isLossLess@Param@At3@@QBE_NXZ
?getCoreCodecParam@Param@At3@@QBE_NAAU12@@Z
?getLosslessTotalSuCount@Header@Ea3@@QBE_JXZ
?createOmgAt3Header@@YAXIHI_NQBEPAE@Z
?setOmgMacAndDataPrefix@@YAIPAEQBEI@Z
?Win32ErrorString@OMGExceptionImpl@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
??0OMGExceptionImpl@@QAE@HPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0H@Z
??1OMGExceptionImpl@@UAE@XZ
??0OMGExceptionImpl@@QAE@ABV0@@Z
?omgAt3HeaderSize@@YAIXZ

kernel32

QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
ExitProcess
LocalFree
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
EnterCriticalSection
LeaveCriticalSection
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
lstrcatA
DisableThreadLibraryCalls
IsDBCSLeadByte
lstrcpynA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetTempPathA
FindClose
FindFirstFileA
GetSystemTimeAsFileTime

user32

CharNextA

advapi32

RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA

ole32

CoCreateInstance
OleRun
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoTaskMemRealloc

oleaut32

SysFreeString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
VariantClear
VariantInit
VariantChangeType
SysStringLen
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
SysAllocString
BSTR_UserFree

rpcrt4

CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy

msvcr71

swprintf
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
_wunlink
_wsplitpath
time
srand
rand
fwrite
fseek
fclose
fopen
??2@YAPAXI@Z
??_U@YAPAXI@Z
realloc
wcsncpy
memcpy
_resetstkoflw
malloc
??_V@YAXPAX@Z
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler
free
_except_handler3
memset
memcmp
__security_error_handler
wcscmp

shlwapi

PathFindExtensionA
PathIsRelativeA

msvcp71

??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?_Xran@_String_base@std@@QBEXXZ
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHABV12@@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHPBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 122B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7f0349ad6275aab69734b393c6e9ccf2

Headers

File Characteristics

Imports

omgutils

kernel32

user32

advapi32

ole32

oleaut32

rpcrt4

msvcr71

shlwapi

msvcp71

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 32KB

.orpc Size: 4KB - Virtual size: 122B

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 812B

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 8KB - Virtual size: 5KB

.text Size: 100KB - Virtual size: 100KB

.text
Size: 36KB - Virtual size: 32KB

.orpc
Size: 4KB - Virtual size: 122B

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 812B

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 8KB - Virtual size: 5KB

.text
Size: 100KB - Virtual size: 100KB