b667a11e52856b6c14786d8095627f32

Sharing

Copy URL

Twitter E-mail

General

Target

b667a11e52856b6c14786d8095627f32
Size

2.1MB
MD5

b667a11e52856b6c14786d8095627f32
SHA1

d2d90d659872ff5bc2f83c8a32de9eebb46c4565
SHA256

db1359670a6a5b793a69dd9c3250d0f122a8d8d8ac44ce767d7107013aafdba7
SHA512

a21737cce4e760c3cc3a3454d14d21b3d2d785cccb0b2a67570e7b9f4eaf458a19a4ce1663c908cc543e42c13bbeb907c443041db226b60f7e415ffd483ea7b1
SSDEEP

24576:SdFWWh0rF5L6p/4llcFyFmdSSosRSXtek3mBbZf2zZqwKtrWTEu2aqM:q9mTL6Z4llrFuFJOXRT6aqM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b667a11e52856b6c14786d8095627f32

Files

b667a11e52856b6c14786d8095627f32
.exe windows:5 windows x86 arch:x86

d49bb5969fbf08d38feefa242e9652cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

sndPlaySoundA
timeGetTime
waveInStop
mciSendCommandA
mciGetErrorStringA
waveInOpen
waveInStart
waveInUnprepareHeader
waveInPrepareHeader
waveInAddBuffer
waveInReset
waveInClose
mmioDescend
mmioOpenA
mmioCreateChunk
mmioRead
mmioWrite
mmioAscend
mmioClose
waveOutGetNumDevs
waveOutGetDevCapsA
mixerGetNumDevs
mixerSetControlDetails
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerClose
mixerOpen
waveInGetErrorTextA
waveInGetNumDevs
waveInGetDevCapsA

avifil32

AVISaveOptionsFree
AVIFileExit
AVIFileInit
AVIFileCreateStreamA
AVIFileRelease
AVIFileOpenA
CreateEditableStream
AVIMakeCompressedStream
AVIStreamStart
AVIStreamWrite
AVIStreamSetFormat
AVISaveVA
AVIStreamReadFormat
AVIStreamInfoA
AVIStreamRelease
AVIStreamOpenFromFileA

msvfw32

ICSendMessage
ICGetInfo
ICOpen
ICInfo
ord2
ICClose

msacm32

acmMetrics
acmFormatChooseA
acmFormatTagDetailsA
acmFormatSuggest

libconfig++

?lookupValue@Config@libconfig@@QBE_NPBDAA_N@Z
?getRoot@Config@libconfig@@QBEAAVSetting@2@XZ
?writeFile@Config@libconfig@@QAEXPBD@Z
?getPath@SettingException@libconfig@@QBEPBDXZ
??1Config@libconfig@@UAE@XZ
??0Config@libconfig@@QAE@XZ
?readFile@Config@libconfig@@QAEXPBD@Z
?getError@ParseException@libconfig@@QBEPBDXZ
?getLine@ParseException@libconfig@@QBEHXZ
?getFile@ParseException@libconfig@@QBEPBDXZ
?exists@Config@libconfig@@QBE_NPBD@Z
?lookup@Config@libconfig@@QBEAAVSetting@2@PBD@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAM@Z
??4Setting@libconfig@@QAEAAV01@M@Z
??4Setting@libconfig@@QAEAAV01@_N@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAH@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4Setting@libconfig@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4Setting@libconfig@@QAEAAV01@J@Z
?add@Setting@libconfig@@QAEAAV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Type@12@@Z
?exists@Setting@libconfig@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAI@Z
??ASetting@libconfig@@QBEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?exists@Setting@libconfig@@QBE_NPBD@Z
??ASetting@libconfig@@QBEAAV01@PBD@Z
??4Setting@libconfig@@QAEAAV01@H@Z
?add@Setting@libconfig@@QAEAAV12@PBDW4Type@12@@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAA_N@Z

camhook

?setPassThrough@@YAX_N@Z
?getHotKeyMap@@YAAAV?$map@UHotKey@@KU?$less@UHotKey@@@std@@V?$allocator@U?$pair@$$CBUHotKey@@K@std@@@3@@std@@XZ
?setHotKeyWindow@@YAXPAUHWND__@@@Z
InstallMyHook
?getCursor@@YAPAUHICON__@@XZ
?Unlock@ClickQueue@@QAEXXZ
?Lock@ClickQueue@@QAEXXZ
?getInstance@ClickQueue@@SAAAV1@XZ
UninstallMyHook

mfc100

ord1239
ord3421
ord12246
ord13089
ord6874
ord13306
ord3691
ord4130
ord4099
ord11079
ord3356
ord3988
ord2219
ord421
ord977
ord11646
ord4870
ord4868
ord5827
ord417
ord10906
ord5208
ord11277
ord2524
ord13312
ord13048
ord4398
ord4419
ord4377
ord4385
ord4389
ord4393
ord4373
ord11188
ord11190
ord11421
ord306
ord8610
ord8595
ord10256
ord10253
ord7437
ord11024
ord6127
ord2337
ord8321
ord884
ord1284
ord6622
ord1271
ord1012
ord3406
ord9968
ord963
ord13784
ord13814
ord13783
ord13804
ord13803
ord14043
ord9447
ord4735
ord4744
ord13223
ord3616
ord3662
ord11029
ord11822
ord2374
ord8570
ord13717
ord13863
ord13852
ord13651
ord13875
ord13656
ord14129
ord14042
ord14124
ord11453
ord4930
ord11648
ord8292
ord10244
ord10016
ord3414
ord8178
ord5514
ord4961
ord2502
ord12608
ord12805
ord9282
ord8307
ord404
ord6686
ord6328
ord4078
ord1890
ord12672
ord7576
ord850
ord1586
ord10967
ord11179
ord9192
ord9188
ord9185
ord6835
ord2023
ord7584
ord7510
ord11726
ord13767
ord4724
ord2163
ord11420
ord13301
ord7073
ord13299
ord8486
ord3676
ord3618
ord11806
ord7091
ord1732
ord14075
ord10922
ord13181
ord11413
ord7144
ord13483
ord13480
ord13485
ord13482
ord13484
ord13481
ord11180
ord9449
ord11787
ord6112
ord888
ord1288
ord11627
ord6637
ord13131
ord13137
ord3362
ord3248
ord6690
ord4344
ord3491
ord13305
ord12865
ord11038
ord8392
ord12415
ord2769
ord7889
ord12118
ord3890
ord3892
ord3548
ord9422
ord10459
ord4076
ord3400
ord4736
ord10746
ord10751
ord8441
ord7945
ord5273
ord10395
ord5256
ord12486
ord5257
ord12488
ord1524
ord11348
ord5445
ord4430
ord4429
ord7520
ord2762
ord7348
ord11017
ord11112
ord3985
ord2215
ord8332
ord12479
ord5252
ord8308
ord433
ord865
ord877
ord457
ord985
ord1264
ord1276
ord1004
ord7590
ord4753
ord1900
ord6207
ord10596
ord8271
ord6344
ord13329
ord11297
ord13310
ord11274
ord2056
ord2063
ord2061
ord6836
ord12681
ord5006
ord2025
ord1292
ord6117
ord3409
ord5238
ord11172
ord7355
ord11184
ord11153
ord5098
ord9281
ord4498
ord1260
ord2936
ord2836
ord6088
ord4345
ord5539
ord11781
ord7837
ord11744
ord7487
ord890
ord374
ord11939
ord11940
ord943
ord1290
ord11924
ord2183
ord5776
ord2184
ord6054
ord1929
ord10976
ord6010
ord345
ord921
ord1939
ord12962
ord2156
ord1294
ord3970
ord3361
ord3241
ord919
ord3429
ord2613
ord7861
ord3741
ord2744
ord8224
ord5784
ord2611
ord13045
ord5242
ord305
ord5207
ord2626
ord266
ord7581
ord265
ord1316
ord9445
ord788
ord11882
ord1210
ord13219
ord12664
ord7322
ord2935
ord2828
ord6083
ord3755
ord2838
ord8231
ord6090
ord5803
ord1251
ord1263
ord428
ord3622
ord344
ord3619
ord3354
ord8136
ord10006
ord5280
ord5786
ord6678
ord7871
ord3254
ord3373
ord3364
ord11067
ord8137
ord10007
ord10360
ord9475
ord2974
ord2973
ord2752
ord5532
ord12531
ord2416
ord11107
ord8305
ord381
ord310
ord946
ord3737
ord5775
ord968
ord8235
ord5821
ord915
ord3738
ord2742
ord5534
ord12535
ord2881
ord2878
ord7349
ord2417
ord14059
ord14061
ord14060
ord14058
ord14062
ord14045
ord13972
ord13973
ord8222
ord11025
ord3395
ord10883
ord13294
ord8070
ord11154
ord6217
ord9994
ord8351
ord2847
ord5004
ord8177
ord1790
ord3801
ord12644
ord1496
ord1503
ord1509
ord1507
ord1514
ord4410
ord4381
ord4415
ord4406
ord4364
ord4368
ord4401
ord3991
ord13980
ord3984
ord2661
ord13302
ord7074
ord13300
ord6128
ord10672
ord12482
ord5253
ord2338
ord11060
ord3484
ord2945
ord2944
ord2846
ord11103
ord4622
ord4903
ord5095
ord8439
ord4881
ord5123
ord4625
ord4774
ord4606
ord5444
ord6897
ord6898
ord6888
ord4772
ord7357
ord9286
ord8304
ord5777
ord895
ord3390
ord2649
ord4686
ord3839
ord7042
ord4143
ord13095
ord1437
ord7835
ord7211
ord12438
ord2770
ord7214
ord3758
ord2939
ord2841
ord8234
ord5432
ord6098
ord4343
ord3744
ord8228
ord5302
ord5858
ord2187
ord3475
ord8600
ord3746
ord5875
ord8554
ord4340
ord11941
ord4212
ord12124
ord12790
ord7832
ord5774
ord3439
ord4283
ord1982
ord5837
ord316
ord4785
ord6970
ord4499
ord3620
ord1448
ord422
ord3621
ord5627
ord12868
ord978
ord6314
ord1313
ord300
ord901
ord1296
ord9191
ord9190
ord6831
ord1854
ord8437
ord8553
ord7875
ord3488
ord12128
ord2138
ord1981
ord12583
ord5830
ord12743
ord10357
ord3655
ord11059
ord9094
ord10134
ord10697
ord8021
ord8031
ord9512
ord10109
ord8612
ord9034
ord6070

msvcr100

wcsnlen
sscanf_s
fsetpos
_fseeki64
fgetpos
abort
_lseek
tmpnam
vsprintf
strrchr
isspace
isdigit
__iob_func
atof
isalpha
vfprintf
strtok
sscanf
getenv
_snprintf
modf
frexp
_gmtime64
_mktime64
_stricmp
putc
_errno
_getcwd
mbstowcs_s
_vsnprintf
??0bad_cast@std@@QAE@ABV01@@Z
floor
__CxxFrameHandler3
qsort
_CIsqrt
_CIsin
ceil
_CIexp
_CIlog
_CIpow
calloc
_strnicmp
fseek
ftell
feof
ferror
getc
fgets
fscanf
_CIfmod
ldiv
_swab
_setjmp3
__CxxLongjmpUnwind
longjmp
strncmp
realloc
isprint
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
perror
tmpfile
isupper
strlen
strcpy
pow
bsearch
exp
log
sqrt
fabs
atan2
memcmp
_setmbcp
_read
_write
_unlink
_close
_open
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
fflush
setvbuf
_unlock_file
_lock_file
ungetc
fputc
fgetc
fprintf
srand
rand
_CIcos
_localtime64_s
_purecall
_strdup
_snprintf_s
strncpy
__RTDynamicCast
fopen
fclose
memmove_s
fread
malloc
free
memcpy_s
fwrite
printf
memmove
atoi
_memccpy
memcpy
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
strcat_s
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
strcpy_s
strstr
sprintf
atol
memset
strftime
_time64
_localtime64
strchr
_setmode

kernel32

WinExec
OpenFile
GetWindowsDirectoryA
GetVersionExA
GlobalLock
GlobalAlloc
GetCurrentThreadId
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleHandleA
SetLastError
DeactivateActCtx
GetLastError
ActivateActCtx
CreateMutexA
ExitProcess
GetSystemDefaultLangID
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
ResumeThread
WaitForSingleObject
MulDiv
GetFileAttributesA
GetModuleFileNameA
GetTempPathA
FindClose
FindFirstFileA
LocalSize
LocalFree
lstrlenA
LocalAlloc
FormatMessageA
GlobalHandle
GlobalFree
GlobalUnlock
CreateFileA
MoveFileA
CopyFileA
SetThreadPriority
CloseHandle
DeleteFileA
WritePrivateProfileStringA
GetUserDefaultLangID
GetTickCount
InterlockedDecrement
InterlockedIncrement
Sleep

user32

ShowWindow
InflateRect
OffsetRect
SetWindowRgn
SetWindowLongA
GetWindowLongA
LoadBitmapW
GetClientRect
GetSystemMetrics
SetMenu
RegisterWindowMessageA
CopyRect
IsRectEmpty
DestroyWindow
DefWindowProcA
PostMessageA
EnumDisplayMonitors
IsWindow
CreateWindowExA
RegisterClassA
IsIconic
FindWindowA
GetLastActivePopup
SetForegroundWindow
LoadIconW
UnregisterClassA
RemoveMenu
IsWindowVisible
UpdateWindow
CloseWindow
GetMonitorInfoA
MonitorFromPoint
LoadBitmapA
SetRect
DrawIcon
DrawTextExA
GetIconInfo
EnableMenuItem
GetSubMenu
LoadMenuW
ClientToScreen
ScreenToClient
PtInRect
CheckMenuItem
GetWindowDC
SetTimer
PeekMessageA
TranslateMessage
DispatchMessageA
TrackPopupMenu
EqualRect
MessageBoxExA
GetDesktopWindow
GetSysColor
GetDC
GetCursorPos
ReleaseDC
ReleaseCapture
LoadCursorA
SetCursor
SetCapture
LoadIconA
LoadCursorFromFileA
GetCursor
GetKeyState
HideCaret
MessageBoxA
GetWindowRect
SendMessageA
EnableWindow
WindowFromPoint
InvalidateRect

gdi32

SelectPalette
RealizePalette
CreateDIBSection
RestoreDC
SetDIBitsToDevice
StretchDIBits
SetStretchBltMode
ExtSelectClipRgn
GetClipBox
SaveDC
SetWinMetaFileBits
DeleteEnhMetaFile
GetEnhMetaFileHeader
GetBkColor
CreateFontIndirectA
GetTextExtentPoint32A
StretchBlt
CreateHatchBrush
CreateDIBitmap
PlayEnhMetaFile
CreatePalette
SelectObject
GetEnhMetaFilePaletteEntries
GetTextExtentPointA
SetTextColor
SetBkColor
SetBkMode
RoundRect
ExtTextOutA
DeleteDC
GetDeviceCaps
GetObjectA
PatBlt
OffsetRgn
CombineRgn
CreateRectRgnIndirect
CreateRectRgn
DeleteObject
GetPixel
BitBlt
Rectangle
SetDIBits
GetTextColor
CreateBrushIndirect
CreateEllipticRgn
CreateRoundRectRgn
SetEnhMetaFileBits
GetDIBits
GetStockObject
CreatePen
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
Ellipse

advapi32

RegOpenKeyExA
RegQueryValueA
RegCloseKey

shell32

SHGetFolderPathA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
Shell_NotifyIconA

ole32

CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes

oleaut32

OleLoadPicture

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??1_Lockit@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bid@locale@std@@QAEIXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?width@ios_base@std@@QAE_J_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?_BADOFF@std@@3_JB
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ

gdiplus

GdipAlloc
GdipDeleteBrush
GdipCreatePen1
GdipDeletePen
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipCreateSolidFill
GdipCreateFromHDC
GdipFree
GdipGetDC
GdipReleaseDC
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipDrawLineI
GdipDrawEllipseI
GdipFillRectangle
GdipFillEllipse
GdipDrawImageRectI
GdipCloneBrush
GdipCreateStringFormat
GdiplusShutdown
GdipGetImageGraphicsContext
GdipCreateFontFromDC
GdipDrawString
GdipSetTextRenderingHint
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteFont
GdipDeleteStringFormat
GdiplusStartup

ws2_32

ntohl
htonl
ntohs
htons

avicap32

capCreateCaptureWindowA

Exports

Exports

?getQueue@ClickQueue@@QAEAAV?$vector@UtagMSLLHOOKSTRUCT@@V?$allocator@UtagMSLLHOOKSTRUCT@@@std@@@std@@XZ
png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_name
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_fixed
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_error_fn
png_set_expand
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 711KB - Virtual size: 710KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d49bb5969fbf08d38feefa242e9652cb

Headers

DLL Characteristics

File Characteristics

Imports

winmm

avifil32

msvfw32

msacm32

libconfig++

camhook

mfc100

msvcr100

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msvcp100

gdiplus

ws2_32

avicap32

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 283KB - Virtual size: 283KB

.data Size: 15KB - Virtual size: 69KB

.rsrc Size: 711KB - Virtual size: 710KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 283KB - Virtual size: 283KB

.data
Size: 15KB - Virtual size: 69KB

.rsrc
Size: 711KB - Virtual size: 710KB