92667f989c3cb5a5c898af99f3513ff96bde02bd50259a7451649b5f161722eb

General

Target

92667f989c3cb5a5c898af99f3513ff96bde02bd50259a7451649b5f161722eb
Size

48KB
MD5

99c2b20938364c5b05113c2b6e3cc776
SHA1

6e1aa1c85180190a8723ff105a53223ffae23df6
SHA256

92667f989c3cb5a5c898af99f3513ff96bde02bd50259a7451649b5f161722eb
SHA512

f4c988489bfac9ab579206ff98eda2cbc3edcf71de57b6b96976fe3c42dfce5b163498aa0d60cb03164876db9f7970db0ed09383d9d5de0213cf9f2d6b10712f
SSDEEP

768:/gLuYPWYx2rYBPBJ6RIkel8jO88TQbwubLdrfSrQh:/gCYPnBvcTCTQkubWQh

Score

N/A

Malware Config

Signatures

Files

92667f989c3cb5a5c898af99f3513ff96bde02bd50259a7451649b5f161722eb
.dll windows x86

4070369e8e717404311d78b1c292d0e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv
FreeLibrary
CompareStringA
InterlockedExchange
GetModuleHandleA
GlobalAlloc
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
SetLastError
GlobalLock
GlobalFree
GlobalUnlock
GetLastError
GetModuleFileNameA

msvcrt

free
_initterm
malloc
_adjust_fdiv
_wcsicmp
__CxxFrameHandler
_except_handler3
??3@YAXPAX@Z
wcslen
wcscpy
??2@YAPAXI@Z
_vsnwprintf

wmvcore

WMCreateSyncReader
WMCreateEditor

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyA

Exports

Exports

WMF2Close
WMF2GetAspectRatio
WMF2GetAudioFormat
WMF2GetAudioOutputFormat
WMF2GetBitRate
WMF2GetCapabilities
WMF2GetColorBits
WMF2GetDurations
WMF2GetFileAspectRatio
WMF2GetFileAttributeInfo
WMF2GetFrameRate
WMF2GetFrameSize
WMF2GetFrameType
WMF2GetTotalFrameNumber
WMF2GetVideoFrameData
WMF2GetVideoFrameDataEx
WMF2GetWMCoreVersion
WMF2InitStream
WMF2InitStreamEx
WMF2IsWMFFile
WMF2LocateAudioBuffer
WMF2Open
WMF2OpenEx

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4070369e8e717404311d78b1c292d0e5

Headers

File Characteristics

Imports

kernel32

msvcrt

wmvcore

advapi32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 892B

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 892B

.reloc
Size: 4KB - Virtual size: 2KB