General

  • Target

    d583cbd9d39b6955d2c82ed11974bcac

  • Size

    10.8MB

  • MD5

    d583cbd9d39b6955d2c82ed11974bcac

  • SHA1

    4ba3689838b0deeb57cb9ba8e1e62bfa3bce5a92

  • SHA256

    e38025d820f932697f2d3429e7543d9089bfd129d144aeb50b0967aa7dd8a3fd

  • SHA512

    1b67307f6287c10f548addd8ad462a5f6da28c9b1d5402ae6bfd44e0661197371691f7852f002d4efad1e3f19119ed67f7d26dbb05c9ebba837af8ae83ebd30b

  • SSDEEP

    196608:ms8RpSRU9Jg+wyJWCuXnr/6zawntaOR/tdBowH8Vj9Tp2Q16FnxT:7aMWwLyJruX76W7OR/td3Sjx51Md

Score
3/10

Malware Config

Signatures

  • Unsigned PE 63 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • d583cbd9d39b6955d2c82ed11974bcac
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $APPDATA/Winamp/Winamp.q1
  • $APPDATA/Winamp/demo.mp3
  • $APPDATA/Winamp/winamp.m3u8
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/baidu8.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/opt3page.ini
  • $PLUGINSDIR/opt4page.ini
  • Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
    .xml
  • Microsoft.VC90.CRT/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/dsp_pacemaker.dll
    .dll windows:4 windows x86 arch:x86

    f010af7eb248da5a04347628a2d2d6cf


    Headers

    Imports

    Exports

    Sections

  • Plugins/enc_aacplus.dll
    .dll windows:5 windows x86 arch:x86

    9bd86acff5d2b4caeae5412672970ffa


    Headers

    Imports

    Exports

    Sections

  • Plugins/enc_flac.dll
    .dll windows:5 windows x86 arch:x86

    da6acb985c1f0535bafbe72912382999


    Headers

    Imports

    Exports

    Sections

  • Plugins/enc_lame.dll
    .dll windows:5 windows x86 arch:x86

    775269e8dc22718227787c7e434a5158


    Headers

    Imports

    Exports

    Sections

  • Plugins/enc_vorbis.dll
    .dll windows:4 windows x86 arch:x86

    042ff644af58725644fac10d5f745534


    Headers

    Imports

    Exports

    Sections

  • Plugins/enc_wav.dll
    .dll windows:5 windows x86 arch:x86

    899a9f213e3e5f75b223a66e605bff97


    Headers

    Imports

    Exports

    Sections

  • Plugins/enc_wma.dll
    .dll windows:5 windows x86 arch:x86

    5b6e8cb471f71148f5a164c306abc22f


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_ape.dll
    .dll windows:4 windows x86 arch:x86

    9e29de686e44eb612477243ad7b0dd78


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_avi.dll
    .dll windows:5 windows x86 arch:x86

    dadd4c6fd47a33b71ad3ce13b238a087


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_cdda.dll
    .dll windows:5 windows x86 arch:x86

    6755824bd212e40656faa5a28c933cc4


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_cue.dll
    .dll windows:4 windows x86 arch:x86

    af8de07382a1a6f51982bcde2ab60870


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_dshow.dll
    .dll windows:5 windows x86 arch:x86

    3d4d7034666d6c61b9be0bd697f884fe


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_flac.dll
    .dll windows:5 windows x86 arch:x86

    ca39d5ed1b78ddb4503fc7ea89688eef


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_flv.dll
    .dll windows:5 windows x86 arch:x86

    afdf0d390b2601668e9822e62718cdfd


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_midi.dll
    .dll windows:5 windows x86 arch:x86

    3aec25def9d87820ccb80726d2b34730


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_mkv.dll
    .dll windows:5 windows x86 arch:x86

    73028a671aad8553b62eafb728f75bf8


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_mod.dll
    .dll windows:5 windows x86 arch:x86

    e32c586c59c156f57c5e8601f979dc45


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_mp3.dll
    .dll windows:5 windows x86 arch:x86

    f4427b8afa25acf59e17a8889aac9925


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_mp4.dll
    .dll windows:5 windows x86 arch:x86

    303a2774ab831dcf73a01c4e0e68654f


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_mpc.dll
    .dll windows:4 windows x86 arch:x86

    d4e365766d694b836b6ffe3200532213


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_nsv.dll
    .dll windows:5 windows x86 arch:x86

    c20656696a0f849995c03661122492ca


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_swf.dll
    .dll windows:5 windows x86 arch:x86

    b0fdabe2f492dc008ae833491a1536fd


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_vorbis.dll
    .dll windows:5 windows x86 arch:x86

    052f24ee1719559a120fee3d5d0eb0ab


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_wave.dll
    .dll windows:5 windows x86 arch:x86

    2b8d505197962109d117ecb1d1b86efe


    Headers

    Imports

    Exports

    Sections

  • Plugins/in_wm.dll
    .dll windows:5 windows x86 arch:x86

    2fa645fe5c23508059e40e6f1313f4e5


    Headers

    Imports

    Exports

    Sections

  • Plugins/lame_enc.dll
    .dll windows:5 windows x86 arch:x86

    40c5aa5506a2469616026bcdd3bdbefa


    Headers

    Imports

    Exports

    Sections

  • Plugins/nsvdec_vp3.dll
    .dll windows:5 windows x86 arch:x86

    e049be9e7e01bb873183e601bb1a14aa


    Headers

    Imports

    Exports

    Sections

  • Plugins/nsvdec_vp5.dll
    .dll windows:5 windows x86 arch:x86

    84f7c245d8cbb7d06a94cbacd6ad46f3


    Headers

    Imports

    Exports

    Sections

  • Plugins/out_disk.dll
    .dll windows:5 windows x86 arch:x86

    55d92fe0ed6c51301d3f115e5fe68753


    Headers

    Imports

    Exports

    Sections

  • Plugins/out_ds.dll
    .dll windows:5 windows x86 arch:x86

    ff3348d3742a57cfe81f12e40562c872


    Headers

    Imports

    Exports

    Sections

  • Plugins/out_lame.dll
    .dll windows:4 windows x86 arch:x86

    fe495ff40bace5e21889c5b643cc2135


    Headers

    Imports

    Exports

    Sections

  • Plugins/read_file.dll
    .dll windows:4 windows x86 arch:x86

    7b9197cb192d549610776bfb9b2d0d53


    Headers

    Imports

    Exports

    Sections

  • Plugins/tataki.dll
    .dll windows:5 windows x86 arch:x86

    1fba652e307f02409ff80dd94fa47662


    Headers

    Imports

    Exports

    Sections

  • Plugins/winampFLV.swf
  • Skins/Winamp .wsz
    .zip
  • Balance.bmp
  • Cbuttons.bmp
  • Eq_ex.bmp
  • Eqmain.bmp
  • Main.bmp
  • Monoster.bmp
  • Numbers.bmp
  • Playpaus.bmp
  • Pledit.bmp
  • Pledit.txt
  • Posbar.bmp
  • Readme.txt
  • Shufrep.bmp
  • Text.bmp
  • Titlebar.bmp
  • VISCOLOR.TXT
  • Volume.bmp
  • gen.bmp
  • genex.bmp
  • video.bmp
  • winampmb.htm
    .html
  • System/aacPlusDecoder.w5s
    .dll windows:5 windows x86 arch:x86

    c26131076de64ec1f6853490474d5e1a


    Headers

    Imports

    Exports

    Sections

  • System/aacPlusDecoder.wbm
  • System/adpcm.w5s
    .dll windows:5 windows x86 arch:x86

    d2b8fffc14754673c14f5c72904b3cef


    Headers

    Imports

    Exports

    Sections

  • System/adpcm.wbm
  • System/bmp.w5s
    .dll windows:5 windows x86 arch:x86

    bb63843a820852464097de3042430a9a


    Headers

    Imports

    Exports

    Sections

  • System/dlmgr.w5s
    .dll windows:5 windows x86 arch:x86

    1c0821c3c38f3b9affdf888bdf595692


    Headers

    Imports

    Exports

    Sections

  • System/gif.w5s
    .dll windows:5 windows x86 arch:x86

    52f790ffb334aa8a893a66798a4f91d9


    Headers

    Imports

    Exports

    Sections

  • System/h264.w5s
    .dll windows:5 windows x86 arch:x86

    607325e9b36a7686dfe08ea0612d0b03


    Headers

    Imports

    Exports

    Sections

  • System/h264.wbm
  • System/jnetlib.w5s
    .dll windows:5 windows x86 arch:x86

    8930cd54c0aef4caa74ff61851a88e53


    Headers

    Imports

    Exports

    Sections

  • System/jpeg.w5s
    .dll windows:5 windows x86 arch:x86

    2ac82e683f928ed2e1fb5bf88b804fc0


    Headers

    Imports

    Exports

    Sections

  • System/mp4v.w5s
    .dll windows:5 windows x86 arch:x86

    dc1c4a1ce7cc1c0b3fecaf5383750e71


    Headers

    Imports

    Exports

    Sections

  • System/mp4v.wbm
  • System/pcm.w5s
    .dll windows:5 windows x86 arch:x86

    b30677cd6dfd2b103d993f02c286051d


    Headers

    Imports

    Exports

    Sections

  • System/pcm.wbm
  • System/playlist.w5s
    .dll windows:5 windows x86 arch:x86

    e60eab67c812241937fd906f8d7f9a12


    Headers

    Imports

    Exports

    Sections

  • System/png.w5s
    .dll windows:5 windows x86 arch:x86

    d98d96e785f9b26e48ccb6ae669c1fff


    Headers

    Imports

    Exports

    Sections

  • System/tagz.w5s
    .dll windows:5 windows x86 arch:x86

    df413bea9a5a1275efc2a15e7ba0768b


    Headers

    Imports

    Exports

    Sections

  • System/vlb.w5s
    .dll windows:5 windows x86 arch:x86

    0539763845fd883e3c830042de406a65


    Headers

    Imports

    Exports

    Sections

  • System/vlb.wbm
  • System/vp6.w5s
    .dll windows:5 windows x86 arch:x86

    06671105994962b5779b0b5d4231d180


    Headers

    Imports

    Exports

    Sections

  • System/vp6.wbm
  • System/vp8.w5s
    .dll windows:5 windows x86 arch:x86

    671e473104dbf6e0e339382bfc7c4ce5


    Headers

    Imports

    Exports

    Sections

  • System/vp8.wbm
  • System/xml.w5s
    .dll windows:5 windows x86 arch:x86

    9df6ca444a2e6cc1e89d8328adf5675f


    Headers

    Imports

    Exports

    Sections

  • libFLAC.dll
    .dll windows:5 windows x86 arch:x86

    0e238eefaf513b375c22d9c896eba16a


    Headers

    Imports

    Exports

    Sections

  • libmp4v2.dll
    .dll windows:5 windows x86 arch:x86

    25acecffe229909fbdad5f04cbbec93d


    Headers

    Imports

    Exports

    Sections

  • libsndfile.dll
    .dll windows:5 windows x86 arch:x86

    28d5056d8d3b5aa1cc14073f53d54a1d


    Headers

    Imports

    Exports

    Sections

  • nde.dll
    .dll windows:5 windows x86 arch:x86

    52ead05d14973e0b93d9cdded35e629e


    Headers

    Imports

    Exports

    Sections

  • nsutil.dll
    .dll windows:5 windows x86 arch:x86

    02680c63947e011ebbea12b138aa32a0


    Headers

    Imports

    Exports

    Sections

  • tataki.dll
    .dll windows:5 windows x86 arch:x86

    1fba652e307f02409ff80dd94fa47662


    Headers

    Imports

    Exports

    Sections

  • whatsnew.txt
  • winamp.exe
    .exe windows:5 windows x86 arch:x86

    a642158410313cd3ac8e931bd01e8d95


    Headers

    Imports

    Exports

    Sections

  • zlib.dll
    .dll windows:5 windows x86 arch:x86

    c9066c01aa272aabd3d64da33f73c55c


    Headers

    Imports

    Exports

    Sections

  • ˵.htm
    .html