9fad4ccea56a479ab5a864cf11c9735af2d1c76648fd6192629a3c22c33f7dee

Sharing

Copy URL Twitter E-mail

General

Target

9fad4ccea56a479ab5a864cf11c9735af2d1c76648fd6192629a3c22c33f7dee
Size

398KB
MD5

04a649dd05326075243b7c737f6b88c3
SHA1

639fb823995243a75e1fe6d9266efa8c999c3443
SHA256

9fad4ccea56a479ab5a864cf11c9735af2d1c76648fd6192629a3c22c33f7dee
SHA512

b94313282acc27df3e738be1a05324082d6a5b542b4c50c027a4d3c11877d1a9feb0b81ccd47c0e2a8c3aa40eccb9ccfa98234bb8a40475cc9aba0152199e2e1
SSDEEP

12288:voYoZVWcbBZJ2FW3AGv8PN59swsr7RkVzwNfwo:oZ4FWD8PVc7RkV8Nfw

Score

N/A

Malware Config

Signatures

Files

9fad4ccea56a479ab5a864cf11c9735af2d1c76648fd6192629a3c22c33f7dee
.dll windows x86

5ab02f3b2f5554e908870e82c1bfb716

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetSystemInfo
GetProcAddress
GetCurrentProcessId
FreeLibrary
SetUnhandledExceptionFilter
LoadLibraryA
MultiByteToWideChar
GetVersionExW
WriteConsoleW
FlushFileBuffers
GetConsoleCP
WriteFile
SetStdHandle
GetStringTypeW
GetCurrentThreadId
CreateFileW
GetModuleFileNameW
GetCurrentProcess
GetCurrentThread
SetThreadPriority
WideCharToMultiByte
Sleep
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
HeapReAlloc
HeapSize
GetStdHandle
LCMapStringW
CompareStringW
GetProcessHeap
SetFilePointerEx
GetFileType
GetConsoleMode
GetTimeZoneInformation
SetConsoleCtrlHandler
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
ResumeThread
ExitThread
HeapFree
HeapAlloc
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
VirtualProtect
VirtualFree
VirtualAlloc
LoadLibraryExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
EncodePointer
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
CreateThread
SwitchToThread
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DuplicateHandle
WaitForSingleObjectEx
GetExitCodeThread
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
IsDebuggerPresent
OutputDebugStringW
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
TerminateProcess
WaitForSingleObject
SetEvent
ResetEvent
ReleaseSemaphore
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateSemaphoreW
CreateIoCompletionPort
LoadLibraryW
CreateTimerQueue
SignalObjectAndWait

user32

EnumDisplayDevicesW
EnumDisplaySettingsW
CopyIcon
DestroyIcon
ReleaseDC
GetWindowRect
GetDC
GetIconInfo
IsWindow
GetCursorInfo
PrintWindow
DrawIconEx
GetCursorPos

gdi32

GetBitmapBits
GetObjectW
SetStretchBltMode
BitBlt
CreateCompatibleBitmap
StretchBlt
CreateCompatibleDC
GetDIBits
DeleteDC
DeleteObject
CreateDIBSection
SelectObject

ole32

CoTaskMemFree
CoInitializeEx
CoCreateInstance
PropVariantClear

ws2_32

gethostname
WSASend
WSARecv
connect
getsockopt
htonl
ioctlsocket
WSAIoctl
select
accept
bind
closesocket
listen
getsockname
WSAGetOverlappedResult
WSASetLastError
WSAGetLastError
send
recv
inet_addr
socket
htons
setsockopt
gethostbyname
WSAStartup
inet_ntoa

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

libffmpeg

swr_free
swr_convert
swr_init
swr_alloc_set_opts
av_get_default_channel_layout
x264_encoder_open_157
x264_param_apply_profile
x264_encoder_close
x264_picture_alloc
x264_param_default_preset
x264_encoder_encode
x264_picture_clean
x264_encoder_headers

wxmedia

WXLogWriteNewW
WXARGBToI420
WXDeviceInit
WXH264DecoderDestroy
WXH264DecoderCreate2
WXARGBScale
WXARGBCopy
WXSoundPlayerDestroy
WXSoundPlayerCreate
WXSoundPlayerWriteData

d3d11

D3D11CreateDevice

gdiplus

GdiplusStartup

dbghelp

MiniDumpWriteDump

Exports

Exports

AudioDeviceResetDefault
WXMediaUtilsAllocSwrCtx
WXScreenGrabChangeHwnd
WXScreenGrabChangeSourceDisplay
WXScreenGrabConfigCreate
WXScreenGrabConfigDestroy
WXScreenGrabConfigSetMicLevel
WXScreenGrabConfigSetOutput
WXScreenGrabConfigSetSourceDisplay
WXScreenGrabConfigSetSourceHwnd
WXScreenGrabConfigSetSystemLevel
WXScreenGrabConfigSetVideoSize
WXScreenGrabConnect
WXScreenGrabInit
WXScreenGrabSendText
WXScreenGrabSetMicLevel
WXScreenGrabSetSystemLevel
WXScreenGrabStart
WXScreenGrabStartExt
WXScreenGrabStop
WXTcpClientConnect
WXTcpClientDisconnect
WXTcpClientSendData
WXTcpClientSendText
WXTcpGetIP
WXTcpGetIPCount
WXTcpGetLocalName
WXTcpGetPath
WXTcpPlayerBreak
WXTcpPlayerChangeHwnd
WXTcpPlayerSendText
WXTcpPlayerStart
WXTcpPlayerStop
WXTcpScreenGetCount
WXTcpScreenGetDefaultInfo
WXTcpScreenGetInfo
WXTcpServerStart
WXTcpServerStop
WXTcpSetCbWindow

Sections

.text
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ab02f3b2f5554e908870e82c1bfb716

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

ws2_32

winmm

libffmpeg

wxmedia

d3d11

gdiplus

dbghelp

Exports

Exports

Sections

.text Size: 289KB - Virtual size: 289KB

.rdata Size: 76KB - Virtual size: 76KB

.data Size: 9KB - Virtual size: 47KB

.gfids Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 17KB - Virtual size: 16KB

.text
Size: 289KB - Virtual size: 289KB

.rdata
Size: 76KB - Virtual size: 76KB

.data
Size: 9KB - Virtual size: 47KB

.gfids
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 17KB - Virtual size: 16KB