foobar2000_get_interface
Static task
static1
Behavioral task
behavioral1
Sample
91d00cd8cf9f60974238e3920043b9e3b068af1fa7d7494e71ddd60b02832794.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
91d00cd8cf9f60974238e3920043b9e3b068af1fa7d7494e71ddd60b02832794.dll
Resource
win10v2004-20231215-en
General
-
Target
91d00cd8cf9f60974238e3920043b9e3b068af1fa7d7494e71ddd60b02832794
-
Size
752KB
-
MD5
1db36054d3536be7cd0259b09fc2c212
-
SHA1
15ebef0d2542d08b269a5ff8f02a810f7e1f4862
-
SHA256
91d00cd8cf9f60974238e3920043b9e3b068af1fa7d7494e71ddd60b02832794
-
SHA512
b099ca57e03aa2937d3e0ffce68fb9a585494883e3a9d3a7e31c184754044ff37d13ad19c9600125f8e351f170756f4358f7b56c4cd7ceb15c5b7a06c2b2d5d3
-
SSDEEP
12288:xQeTBvRXdECmI3oAYZjJmPEQsnicNOnsRl+OTqCNc4WJmaeUuz:xQeTBvRXd5mI3TYZYEQsni3OmCOlRev
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91d00cd8cf9f60974238e3920043b9e3b068af1fa7d7494e71ddd60b02832794
Files
-
91d00cd8cf9f60974238e3920043b9e3b068af1fa7d7494e71ddd60b02832794.dll windows:6 windows x86 arch:x86
a25c7c59ff73fd898300c5a52b99f782
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shared
_GetInfiniteWaitEvent@0
_uFormatSystemErrorMessage@8
_stricmp_utf8_ex@16
_uBugCheck@0
_uExceptFilterProc@4
_uPrintCrashInfo_OnEvent@8
_uAppendMenu@16
rpcrt4
UuidCreate
powrprof
GetPwrCapabilities
SetSuspendState
kernel32
GetSystemTimeAsFileTime
IsDebuggerPresent
ResetEvent
SetEvent
CreateEventW
OutputDebugStringW
GlobalSize
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GetTickCount
VerSetConditionMask
VerifyVersionInfoW
GetVersionExW
MultiByteToWideChar
GetModuleHandleW
GetProcAddress
LoadLibraryExW
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
GetCurrentProcessId
LocalFileTimeToFileTime
SystemTimeToFileTime
CloseHandle
UnregisterWaitEx
CancelWaitableTimer
RegisterWaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
DecodePointer
MulDiv
InitializeCriticalSection
GetDateFormatW
GetTimeFormatW
GetLocalTime
SetSystemPowerState
GetCurrentProcess
lstrlenW
FindResourceW
FindResourceExW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
SetLastError
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
RaiseException
DeleteCriticalSection
GetLastError
InitializeCriticalSectionEx
HeapDestroy
HeapSize
HeapReAlloc
DisableThreadLibraryCalls
user32
GetMessagePos
RedrawWindow
IsWindowVisible
UnhookWindowsHookEx
SetWindowsHookExW
WindowFromPoint
CallNextHookEx
GetNextDlgTabItem
InvalidateRgn
ScrollWindowEx
SetScrollPos
UpdateWindow
GetScrollInfo
SetScrollInfo
SetRectEmpty
IsDialogMessageW
SetGestureConfig
CloseGestureInfoHandle
GetGestureInfo
GetMenuStringW
IsChild
PostMessageW
SetLayeredWindowAttributes
GetAncestor
FillRect
MoveWindow
OffsetRect
CreateDialogParamW
DrawTextW
EndPaint
BeginPaint
CharLowerW
FrameRect
DrawIcon
DrawIconEx
EnumThreadWindows
DrawFocusRect
GetClassNameW
GetDC
GetWindowPlacement
IsIconic
MonitorFromRect
GetMenu
GetClipboardData
DrawFrameControl
CloseClipboard
OpenClipboard
AdjustWindowRect
AdjustWindowRectEx
MapDialogRect
EndDeferWindowPos
IsZoomed
DeferWindowPos
BeginDeferWindowPos
GetDlgCtrlID
DrawEdge
GetIconInfo
NotifyWinEvent
CopyRect
GetFocus
IsRectEmpty
GetMenuBarInfo
InflateRect
SystemParametersInfoW
RegisterWindowMessageW
GetClientRect
SetWindowPos
MapWindowPoints
ReleaseDC
GetWindowDC
GetSysColor
CreateWindowExW
GetClassInfoExW
RegisterClassExW
DestroyWindow
SetTimer
LoadCursorW
SetCursor
SetCapture
KillTimer
CheckMenuRadioItem
PtInRect
IntersectRect
IsWindowEnabled
GetKeyState
CallWindowProcW
DefWindowProcW
GetSystemMetrics
ShowWindow
IsWindow
InvalidateRect
GetDlgItemInt
SetDlgItemInt
ExitWindowsEx
DestroyMenu
MonitorFromPoint
CreatePopupMenu
TrackPopupMenu
AppendMenuW
ScreenToClient
GetCursorPos
GetActiveWindow
ClientToScreen
IsDlgButtonChecked
CheckDlgButton
SetWindowTextW
SetFocus
MessageBeep
SetWindowLongW
DialogBoxParamW
UnregisterClassW
EndDialog
SetDlgItemTextW
GetWindowTextW
GetWindowTextLengthW
SendMessageW
GetDlgItem
EnableWindow
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
TrackMouseEvent
gdi32
CreateRectRgn
IntersectClipRect
BitBlt
SetViewportOrgEx
CreateCompatibleBitmap
CreateCompatibleDC
CreateRectRgnIndirect
LPtoDP
CombineRgn
OffsetRgn
GetBkColor
GetTextColor
GetCurrentObject
CreatePolygonRgn
FrameRgn
GetTextMetricsW
OffsetWindowOrgEx
ExtTextOutW
GetObjectW
CreateFontIndirectW
SetBkColor
SetTextColor
DeleteObject
DeleteDC
SetBkMode
MoveToEx
LineTo
GetTextExtentPoint32W
SetDCPenColor
SetDCBrushColor
CreatePen
GetTextExtentPointW
GetDeviceCaps
RestoreDC
SaveDC
SelectObject
GetStockObject
FillRgn
SetWindowOrgEx
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
shell32
ord74
ShellExecuteW
oleaut32
VariantInit
VariantClear
SysAllocString
msvcp140
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?uncaught_exception@std@@YA_NXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Xbad_alloc@std@@YAXXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?id@?$numpunct@_W@std@@2V0locale@2@A
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?classic@locale@std@@SAABV12@XZ
?narrow@?$ctype@_W@std@@QBED_WD@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?exceptions@ios_base@std@@QAEXH@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?_Xout_of_range@std@@YAXPBD@Z
??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Syserror_map@std@@YAPBDH@Z
?imbue@ios_base@std@@QAE?AVlocale@2@ABV32@@Z
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?tolower@?$ctype@_W@std@@QBE_W_W@Z
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBUtm@@PB_W4@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?_Xbad_function_call@std@@YAXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
_Mbrtowc
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
_Xtime_get_ticks
?_Xlength_error@std@@YAXPBD@Z
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
uxtheme
DrawThemeTextEx
GetThemePartSize
IsThemePartDefined
OpenThemeData
CloseThemeData
DrawThemeBackground
SetWindowTheme
GetThemeFont
msimg32
GradientFill
oleacc
AccessibleObjectFromWindow
LresultFromObject
dwmapi
DwmSetWindowAttribute
gdiplus
GdipDrawLineI
GdipSetSmoothingMode
GdipDeleteGraphics
GdipDeletePen
GdipCreatePen1
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
vcruntime140
__std_type_info_compare
memcpy
__CxxFrameHandler3
__RTDynamicCast
memcmp
memset
__std_terminate
strstr
memmove
__current_exception
__std_exception_copy
__std_exception_destroy
__current_exception_context
_except_handler4_common
_purecall
_CxxThrowException
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_errno
_initterm_e
_initterm
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
api-ms-win-crt-heap-l1-1-0
calloc
_recalloc
malloc
_callnewh
realloc
_expand
free
api-ms-win-crt-string-l1-1-0
wcsncpy_s
wcsnlen
_wcsicmp
_wcsnicmp
tolower
isdigit
isspace
wmemcpy_s
iswspace
api-ms-win-crt-time-l1-1-0
_mktime64
_localtime64
_time64
_localtime64_s
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
api-ms-win-crt-math-l1-1-0
lround
__libm_sse2_pow
_libm_sse2_log10_precise
_libm_sse2_sqrt_precise
_libm_sse2_pow_precise
api-ms-win-crt-utility-l1-1-0
rand
srand
comctl32
ord410
ImageList_GetIconSize
ord413
ImageList_DrawEx
ole32
CoCreateInstance
DoDragDrop
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
CreateStreamOnHGlobal
Exports
Exports
Sections
.text Size: 518KB - Virtual size: 517KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ