binkw32[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

binkw32.dll
Size

184KB
MD5

509c5fba890a7c933b5484c4cd93eebb
SHA1

b9c70c6618a03b7504a2f19b72f85e6ed0d80fbf
SHA256

48b7566c3d94d1dff2866517586b40397ed57f8f238587feadf667a2db8cb995
SHA512

192cd01e1c708596f50d390fdef8903101c455594bdd3dc6b318a7c5df31ea0984bfa021e0f4c6265c8899a1ba3c8fb7d7a2d407fbbb171a0b893f138cf4626e
SSDEEP

3072:5n7PquXBctBWmgOKedey7gwYgiPo3VF2IIIGVHw1lUqxvj1/9c5+GlIfKU:57PquRctPoq1F2IIIsHw1L5Vc5+R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
binkw32.dll

Files

binkw32.dll
.dll windows:5 windows x86 arch:x86

6f9b5b539131d7ac801e511e83285000

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\devel\projects\bink\build\binkw32.pdb

Imports

user32

GetCursorPos
GetTopWindow
GetWindowLongA
GetWindow
GetWindowThreadProcessId
GetActiveWindow
GetDesktopWindow
MessageBoxA

kernel32

InitializeCriticalSection
InterlockedExchange
FreeLibrary
LocalAlloc
HeapCreate
HeapFree
HeapAlloc
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
SetErrorMode
Sleep
GetProcAddress
LoadLibraryA
GetSystemInfo
GetModuleHandleA
GetCurrentProcessId
OutputDebugStringA
QueryPerformanceCounter
GetTickCount
GetEnvironmentVariableA
QueryPerformanceFrequency
TerminateProcess
GetCurrentProcess
CreateFileA
CloseHandle
SetFilePointer
ReadFile
DisableThreadLibraryCalls
SetUnhandledExceptionFilter
WaitForSingleObject
GetCurrentThread
GetLastError
LeaveCriticalSection
CreateSemaphoreA
SetThreadPriority
ReleaseSemaphore
RaiseException
EnterCriticalSection
GetThreadPriority
CreateMutexA
DeleteCriticalSection
SetThreadAffinityMask
ReleaseMutex
ResumeThread
CreateThread

winmm

waveOutRestart
waveOutPause
waveOutWrite
waveOutReset
timeGetTime
timeEndPeriod
timeBeginPeriod
waveOutClose
waveOutPrepareHeader
waveOutOpen
waveOutSetVolume
waveOutUnprepareHeader

ole32

CoInitializeEx
CoCreateInstance

Exports

Exports

_BinkAllocateFrameBuffers@12
_BinkClose@4
_BinkCloseTrack@4
_BinkControlBackgroundIO@8
_BinkCopyToBuffer@28
_BinkCopyToBufferRect@44
_BinkDoFrame@4
_BinkDoFrameAsync@12
_BinkDoFrameAsyncMulti@12
_BinkDoFrameAsyncWait@8
_BinkDoFramePlane@8
_BinkFreeGlobals@0
_BinkGetError@0
_BinkGetFrameBuffersInfo@8
_BinkGetGPUDataBuffersInfo@8
_BinkGetKeyFrame@12
_BinkGetPlatformInfo@8
_BinkGetRealtime@12
_BinkGetRects@4
_BinkGetSummary@8
_BinkGetTrackData@8
_BinkGetTrackID@8
_BinkGetTrackMaxSize@8
_BinkGetTrackType@8
_BinkGoto@12
_BinkLogoAddress@0
_BinkNextFrame@4
_BinkOpen@8
_BinkOpenDirectSound@4
_BinkOpenMiles@4
_BinkOpenTrack@8
_BinkOpenWaveOut@4
_BinkOpenWithOptions@12
_BinkOpenXAudio27@4
_BinkOpenXAudio28@4
_BinkOpenXAudio2@4
_BinkPause@8
_BinkRegisterFrameBuffers@8
_BinkRegisterGPUDataBuffers@8
_BinkRequestStopAsyncThread@4
_BinkRequestStopAsyncThreadsMulti@8
_BinkService@4
_BinkSetError@4
_BinkSetFileOffset@8
_BinkSetFrameRate@8
_BinkSetIO@4
_BinkSetIOSize@4
_BinkSetMemory@8
_BinkSetOSFileCallbacks@16
_BinkSetPan@12
_BinkSetSimulate@4
_BinkSetSoundOnOff@8
_BinkSetSoundSystem2@12
_BinkSetSoundSystem@8
_BinkSetSoundTrack@8
_BinkSetSpeakerVolumes@20
_BinkSetVideoOnOff@8
_BinkSetVolume@12
_BinkSetWillLoop@8
_BinkShouldSkip@4
_BinkStartAsyncThread@8
_BinkUtilCPUs@0
_BinkUtilFree@4
_BinkUtilMalloc@4
_BinkUtilMutexCreate@8
_BinkUtilMutexDestroy@4
_BinkUtilMutexLock@4
_BinkUtilMutexLockTimeOut@8
_BinkUtilMutexUnlock@4
_BinkWait@4
_BinkWaitStopAsyncThread@4
_BinkWaitStopAsyncThreadsMulti@8
_RADTimerRead@0

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f9b5b539131d7ac801e511e83285000

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

kernel32

winmm

ole32

Exports

Exports

Sections

.text Size: 102KB - Virtual size: 102KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 38KB - Virtual size: 54KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 102KB - Virtual size: 102KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 38KB - Virtual size: 54KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 4KB