f:\sandbox\20090417_160837\jnetlib\Profiling\jnetlib.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a013eae4921c6189c15b450baa2bd9d4a10c9fd8ad73d6b4b8d9bbdca335a446.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a013eae4921c6189c15b450baa2bd9d4a10c9fd8ad73d6b4b8d9bbdca335a446.dll
Resource
win10v2004-20240508-en
General
-
Target
a013eae4921c6189c15b450baa2bd9d4a10c9fd8ad73d6b4b8d9bbdca335a446
-
Size
605KB
-
MD5
48b002dc300f573bc083db36d886739d
-
SHA1
161811785a0f9f1c3656561a75379da995340b0d
-
SHA256
a013eae4921c6189c15b450baa2bd9d4a10c9fd8ad73d6b4b8d9bbdca335a446
-
SHA512
3cbf3c4a95845963040f297fb0b0124df1c4b9051cb1cab929428b686d7a2dfb1e71bda8cc664366cbff67e1104df6446be374e99e0340980508adb37b6b8ede
-
SSDEEP
12288:qYxTFoGrhbdwH5VZxWU0bM3hkfzbp3q4ZQ:dZ/hbdwH5VZxWU0bMxsp3q4ZQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a013eae4921c6189c15b450baa2bd9d4a10c9fd8ad73d6b4b8d9bbdca335a446
Files
-
a013eae4921c6189c15b450baa2bd9d4a10c9fd8ad73d6b4b8d9bbdca335a446.dll windows:4 windows x86 arch:x86
95f7e13d3f22d4aaae653b9f9f954674
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CreateThread
CloseHandle
WaitForSingleObject
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
FreeLibrary
lstrcpynA
lstrlenA
InterlockedExchangeAdd
SetLastError
GetVersionExA
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GetStdHandle
GetFileType
GetVersion
GetCurrentThreadId
DisableThreadLibraryCalls
LocalAlloc
InterlockedExchange
GetLastError
RaiseException
FlushConsoleInputBuffer
advapi32
RegisterEventSourceA
CryptGenRandom
CryptAcquireContextA
CryptReleaseContext
DeregisterEventSource
ReportEventA
nscrt
_except_handler3
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
realloc
time
strtoul
strncpy
_stat
_getch
signal
fputs
_fileno
strchr
calloc
sprintf
_vsnprintf
strcmp
memset
_strnicmp
strcat
_purecall
atoi
strcpy
strstr
strlen
strncmp
_strdup
_stricmp
getenv
tolower
isspace
qsort
wcsstr
vfprintf
abort
strerror
isdigit
gmtime
memchr
fprintf
isxdigit
isupper
sscanf
fclose
fread
fwrite
fflush
fopen
_setmode
ftell
fseek
fgets
_errno
memmove
_iob
malloc
free
memcpy
user32
MessageBoxA
GetDesktopWindow
GetUserObjectInformationW
GetProcessWindowStation
Exports
Exports
GetWinamp5SystemComponent
Sections
.text Size: 378KB - Virtual size: 377KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ