f7e734a3a397bc640b97401fb3fbd90915f55f4f4a9c991a94e4bfc2775e4d33

Sharing

Copy URL Twitter E-mail

General

Target

f7e734a3a397bc640b97401fb3fbd90915f55f4f4a9c991a94e4bfc2775e4d33
Size

2.2MB
MD5

e0e9c23fd29acd98c825bc8056548c6e
SHA1

2b4ca0627e9a97d507f197a25574697075b17000
SHA256

f7e734a3a397bc640b97401fb3fbd90915f55f4f4a9c991a94e4bfc2775e4d33
SHA512

a0870320bc227fe46e51ab04d55c8bcd119e1d8b83d59c19df1af7bf46150a986935c2b7b10cc499bdebfe8b98f55306466298be45a13f61160d6b9ee9b36468
SSDEEP

49152:oQtuQqf7TLPxFMyZG8VcM2Nfket1XDN9m9yZ6C8Le7w4+:xodR+fVtxbmK7w4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7e734a3a397bc640b97401fb3fbd90915f55f4f4a9c991a94e4bfc2775e4d33

Files

f7e734a3a397bc640b97401fb3fbd90915f55f4f4a9c991a94e4bfc2775e4d33
.dll windows:6 windows x64 arch:x64

93a1eb2f259de67ab581d089c43c0071

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

zlib1

inflateEnd
inflate
inflateInit_

msacm32

acmStreamUnprepareHeader
acmStreamClose
acmStreamConvert
acmStreamOpen
acmStreamPrepareHeader
acmFormatSuggest
acmFormatTagDetailsW

avcodec-fb2k-60

avcodec_open2
avcodec_close
avcodec_send_packet
avcodec_receive_frame
av_init_packet
av_packet_unref
avcodec_parameters_to_context
avcodec_free_context
avcodec_flush_buffers
avcodec_parameters_free
avcodec_parameters_alloc
avcodec_parameters_from_context
avcodec_alloc_context3
avcodec_find_decoder

avformat-fb2k-60

avio_alloc_context
avio_context_free
avformat_close_input
avformat_alloc_context
avformat_open_input
avformat_find_stream_info
av_find_best_stream
av_seek_frame
av_read_frame

avutil-fb2k-58

av_dict_free
av_free
av_frame_unref
av_version_info
av_malloc
av_dict_set
av_mallocz
av_crc
av_crc_get_table

kernel32

DeviceIoControl
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionEx
GetCurrentThreadId
RaiseException
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
VirtualFree
GetProcessHeap
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
MulDiv
GetTickCount64
DecodePointer
FreeLibrary
GetProcAddress
GetVersionExW
SetEvent
VirtualAlloc
GlobalLock
GlobalUnlock
CreateEventW
WaitForSingleObject
ResetEvent
WaitForMultipleObjects
GetModuleHandleW
Sleep
GetThreadPriority
SetThreadPriority
ResumeThread
SystemTimeToFileTime
lstrlenW
LoadLibraryExW
GlobalSize
GetLastError
SetLastError
WideCharToMultiByte
MultiByteToWideChar
GetDriveTypeW
ReadFile
WriteFile
SetFilePointer
GetCurrentThread
OutputDebugStringW
DisableThreadLibraryCalls
CreateFileW
GetStdHandle
HeapAlloc
SetEndOfFile
SetFileAttributesW
DeleteFileW
GetFileSize
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
LoadLibraryExA
IsDebuggerPresent
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent

user32

DrawEdge
AdjustWindowRect
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetDlgCtrlID
WindowFromPoint
CloseClipboard
OpenClipboard
MapDialogRect
GetWindowTextW
GetWindowTextLengthW
CharLowerW
ReleaseDC
CopyRect
ClientToScreen
MonitorFromRect
GetMonitorInfoW
IsIconic
GetWindowPlacement
IsWindowVisible
EnumThreadWindows
IsZoomed
PeekMessageW
DispatchMessageW
MsgWaitForMultipleObjects
GetClipboardData
GetWindowDC
MapWindowPoints
DrawFrameControl
GetDlgItemInt
MessageBoxW
SetWindowTextW
RegisterClassW
CreateWindowExW
LoadCursorW
GetMenu
AdjustWindowRectEx
GetWindowRect
SetFocus
InvalidateRect
CreateDialogParamW
SystemParametersInfoW
MessageBeep
ShowWindow
GetDlgItem
GetDC
SendDlgItemMessageW
SetDlgItemInt
CallWindowProcW
DefWindowProcW
GetSysColor
GetWindowLongPtrW
OffsetRect
SetWindowLongPtrW
UpdateWindow
DestroyWindow
GetKeyState
EnableWindow
GetWindowLongW
SetWindowLongW
SetWindowPos
PostMessageW
IsWindowEnabled
FillRect
GetClientRect
GetParent
DrawTextW
UnregisterClassW
SendMessageW
GetClassInfoExW
RegisterClassExW
EndDeferWindowPos
wsprintfW
GetSystemMetrics
BeginPaint
EndPaint
IntersectRect
TrackMouseEvent
BeginDeferWindowPos
GetFocus
DeferWindowPos

gdi32

GetDeviceCaps
SetBkMode
SetTextColor
GetTextExtentPoint32W
SelectObject
GetBkColor
GetTextColor
SetBkColor
CreateFontIndirectW
GetObjectW
DeleteObject
DeleteDC
GetStockObject

shell32

DragFinish

shared

?convert_from_int32@audio_math@@YAXPEBH_KPEANN@Z
uAddStringUpper
stricmp_utf8_ex
uCharUpper
uCharLower
uDragQueryFileCount
uDragQueryFile
uGetWindowText
??0uCallStackTracker@@QEAA@PEBD@Z
??1uCallStackTracker@@QEAA@XZ
?convert_from_int16@audio_math@@YAXPEBF_KPEANN@Z
LoadSystemLibrary
uGetTempPath
uGetTempFileName
uDeleteFile
uReplaceStringAdd
GetInfiniteWaitEvent
?convert_to_int16@audio_math@@YAXPEBN_KPEAFN@Z
uGetOpenFileName
ModalDialog_CanCreateNew
ModalDialog_PokeExisting
uAddStringLower
uSendMessageText
uExceptFilterProc
PokeWindow
uSetWindowText
uGetDlgItemText
stricmp_utf8
CreateFileAbortable
uBugCheck
uFormatSystemErrorMessage
uPrintCrashInfo_OnEvent
stricmp_utf8_partial

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?_Xlength_error@std@@YAXPEBD@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z

comctl32

ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create
InitCommonControlsEx

uxtheme

OpenThemeData
CloseThemeData
SetWindowTheme
DrawThemeBackground

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp
wcsrchr
memchr
__current_exception
__current_exception_context
memmove
__std_type_info_destroy_list
__std_exception_copy
__std_terminate
__std_exception_destroy
memset
memcpy
strrchr
wcschr
__C_specific_handler
strstr
_purecall
strchr
_CxxThrowException

api-ms-win-crt-runtime-l1-1-0

abort
_invalid_parameter_noinfo_noreturn
_errno
_invalid_parameter_noinfo
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
exit
terminate
_seh_filter_dll
_beginthreadex
_initterm
_initterm_e
_controlfp_s

api-ms-win-crt-convert-l1-1-0

_wtoi
_itoa_s
strtod
atoi
_atoi64
atoll

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__acrt_iob_func
fclose
__stdio_common_vswprintf_s
__stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

_strdup
_strnicmp
strcpy_s
strcat_s
isalnum
isdigit
strlen
strcmp
towlower
wcslen
wcscat_s
strncmp
_wcsicmp
wcscpy_s
wcsnlen

api-ms-win-crt-heap-l1-1-0

calloc
_callnewh
_aligned_malloc
_aligned_realloc
_recalloc
realloc
_expand
malloc
_aligned_free
free

api-ms-win-crt-math-l1-1-0

atan
pow
sin
cos
sqrt
log10f
exp
llround
ldexp
acos
exp2
floor
cosf
log10
fabs
lround
log

api-ms-win-crt-utility-l1-1-0

srand
abs
labs
qsort
rand

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CoCreateGuid

Exports

Exports

ConvertFile
ConvertFileW
ConvertFileW2
CreateIAPEDecompress
CreateIAPEDecompressEx
CreateIAPEDecompressEx2
DecompressFile
DecompressFileW
DecompressFileW2
FillRF64Header
FillWaveFormatEx
FillWaveHeader
GetAPECompressionLevelName
GetAPEFileType
VerifyFile
VerifyFileW
VerifyFileW2
foobar2000_get_interface

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 415KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.movehcs
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

93a1eb2f259de67ab581d089c43c0071

Headers

DLL Characteristics

File Characteristics

Imports

zlib1

msacm32

avcodec-fb2k-60

avformat-fb2k-60

avutil-fb2k-58

kernel32

user32

gdi32

shell32

shared

msvcp140

comctl32

uxtheme

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

ole32

Exports

Exports

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 415KB - Virtual size: 414KB

.data Size: 31KB - Virtual size: 37KB

.pdata Size: 73KB - Virtual size: 72KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 18KB - Virtual size: 17KB

.movehcs Size: 2KB - Virtual size: 4KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 415KB - Virtual size: 414KB

.data
Size: 31KB - Virtual size: 37KB

.pdata
Size: 73KB - Virtual size: 72KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 18KB - Virtual size: 17KB

.movehcs
Size: 2KB - Virtual size: 4KB