170b34e27f65d6dcbeb8a39b3f17c788

Sharing

Copy URL Twitter E-mail

General

Target

170b34e27f65d6dcbeb8a39b3f17c788
Size

452KB
MD5

170b34e27f65d6dcbeb8a39b3f17c788
SHA1

adcc3ff8500109d33aa8afb2cf689b46ccdd6f02
SHA256

d50633b09402e188532e7d7d5b64b6036917faf78794984aff26c47b669fac63
SHA512

f013b431cb0c1c71894fd7e7d728d2cabf95425111d00d9524789b07166711980919f9b185c6640af776b9318f67d77f72786d07313325970f983d6526dab7c8
SSDEEP

6144:xveFKSaaotY+RR3Ve4duN7oRhk/q0HmKVi7AkwJ0l7Wtwc1tOYo9YxPdbCedE91H:x8KUSei7DHx7WxO8l2eW9DXd

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3DMP3Recorder.exe
unpack001/wavtrans.ax

Files

170b34e27f65d6dcbeb8a39b3f17c788
.rar
3DMP3Recorder.exe
.exe windows:4 windows x86 arch:x86

e5a2853503f570ba08744824b30f8055

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerGetDevCapsA
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetControlDetailsA
mixerSetControlDetails
sndPlaySoundA
mixerGetID
waveOutClose
waveOutOpen
waveInClose
waveInOpen
waveInReset
waveInStart
waveInPrepareHeader
waveInAddBuffer
mixerOpen
mixerGetNumDevs

msvfw32

MCIWndCreateA

kernel32

WritePrivateProfileStringA
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileAttributesA
GetFileTime
SetErrorMode
GetTickCount
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetTimeZoneInformation
GetLocalTime
HeapReAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
RaiseException
GetACP
HeapSize
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
InterlockedExchange
CreateThread
Sleep
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
LockResource
LoadResource
FindResourceA
GetProcAddress
LoadLibraryA
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
CloseHandle
GlobalFree
SetEvent
VirtualFree
ResetEvent
WaitForSingleObject
VirtualAlloc
CreateEventA
lstrcpyA
GetCurrentThreadId
GetLastError
GetSystemTime
MultiByteToWideChar
lstrlenA
lstrcpynA
WideCharToMultiByte
lstrcmpA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetFileSize
CreateFileA
OutputDebugStringA
GetCurrentThread
lstrcmpiA
GlobalDeleteAtom
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
FormatMessageA
LocalFree
InterlockedDecrement
GetModuleFileNameA
InterlockedIncrement
GetModuleHandleA
SetLastError

user32

MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
GetClassNameA
LoadCursorA
CharUpperA
LoadStringA
InflateRect
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MapDialogRect
GetWindow
SetWindowContextHelpId
WindowFromPoint
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
PostQuitMessage
wsprintfA
PostThreadMessageA
RegisterClipboardFormatA
GetMenu
GetKeyState
GetParent
GetWindowRgn
RedrawWindow
OffsetRect
SetMenuDefaultItem
CheckMenuItem
GetCursorPos
TrackPopupMenu
GetMenuItemID
SetCapture
ReleaseCapture
ClientToScreen
SetForegroundWindow
CreateWindowExA
SetWindowPos
GetDlgCtrlID
GetSysColor
GetDesktopWindow
GetWindowRect
SetClassLongA
SetCursor
ScreenToClient
EnableWindow
InvalidateRect
GrayStringA
DrawTextA
TabbedTextOutA
GetDC
KillTimer
PtInRect
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
GetDlgItem
SetWindowRgn
LoadMenuA
GetSubMenu
GetClassLongA
LoadImageA
SetTimer
PostMessageA
LoadIconA
SendMessageA
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA

gdi32

Escape
FillRgn
CreateDCA
GetDeviceCaps
OffsetRgn
GetRgnBox
CombineRgn
PtInRegion
SetTextAlign
SetTextColor
GetTextMetricsA
CreateFontIndirectA
GetObjectA
SetBkMode
SelectClipRgn
DeleteDC
CreateBitmap
SaveDC
RestoreDC
GetStockObject
SetBkColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
TextOutA
GetClipBox
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
PatBlt
GetTextColor
GetBkColor
CreateRectRgn
DeleteObject
BeginPath
MoveToEx
LineTo
EndPath
PathToRegion
RectVisible
PtVisible
LPtoDP
GetMapMode
DPtoLP
BitBlt
CreatePolygonRgn
CreatePen
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
ExtTextOutA
SelectObject
GetTextExtentPointA
ScaleWindowExtEx
CreateDIBitmap
StretchBlt

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

InitCommonControlsEx
ord17

oledlg

ord8

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize
CLSIDFromString
CoTaskMemFree
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal

olepro32

ord253
ord251

oleaut32

SysAllocString
VariantCopy
SysAllocStringByteLen
VariantChangeType
SysStringLen
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

msvcrt

fwrite
fread
fclose
fopen
_iob
fprintf
abort
localtime
sprintf
time
_fileno
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
fgetwc
ungetwc
fsetpos
fgetpos
ungetc
fputc
setvbuf
fgets
fseek
ftell
_setmode
fflush

Sections

.text
Size: 353KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 67KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.JGLong
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HotKey.xml
.xml
Readme.rtf
.rtf
Readme.txt
wavtrans.ax
.dll regsvr32 windows:4 windows x86 arch:x86

ce30c01a681fa9ab823bc5b79ae7620d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall

winmm

timeGetTime
timeSetEvent

kernel32

SetThreadPriority
GetACP
GetTickCount
GetCurrentThread
GetThreadPriority
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
CloseHandle
CreateEventA
ResetEvent
DuplicateHandle
GetCurrentProcess
GetCurrentThreadId
SetEvent
WaitForMultipleObjects
WaitForSingleObject
CreateSemaphoreA
ReleaseSemaphore
GetSystemInfo
VirtualAlloc
VirtualFree
FreeLibrary
LoadLibraryA
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameA
WideCharToMultiByte
DisableThreadLibraryCalls
InterlockedExchange
CreateThread
GetProcAddress
GetModuleHandleA
GetVersionExA

advapi32

RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA
RegSetValueA

user32

wsprintfA
PeekMessageA
MsgWaitForMultipleObjects
wvsprintfA
PostThreadMessageA
RegisterWindowMessageA
GetQueueStatus
DispatchMessageA

ole32

CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
CoUninitialize
CoTaskMemFree
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
下载说明.htm
.html .js polyglot
非常世纪资源网.url
.url

Sharing

General

Malware Config

Signatures

Files

e5a2853503f570ba08744824b30f8055

Headers

File Characteristics

Imports

winmm

msvfw32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

msvcrt

Sections

.text Size: 353KB - Virtual size: 356KB

.rdata Size: 63KB - Virtual size: 64KB

.data Size: 67KB - Virtual size: 220KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.JGLong Size: 1KB - Virtual size: 4KB

ce30c01a681fa9ab823bc5b79ae7620d

Headers

File Characteristics

Imports

msvcrt

winmm

kernel32

advapi32

user32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 400B

.rsrc Size: 4KB - Virtual size: 952B

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 353KB - Virtual size: 356KB

.rdata
Size: 63KB - Virtual size: 64KB

.data
Size: 67KB - Virtual size: 220KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.JGLong
Size: 1KB - Virtual size: 4KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 400B

.rsrc
Size: 4KB - Virtual size: 952B

.reloc
Size: 4KB - Virtual size: 2KB