MSFLACEncoder.pdb
Static task
static1
Behavioral task
behavioral1
Sample
MSFlacEncoder.dll
Resource
win10v2004-20240508-en
General
-
Target
MSFlacEncoder.dll
-
Size
244KB
-
MD5
acb730a2d6e9d21307d730cdc4165cb1
-
SHA1
0067f4aa8d2900b653591466b80923b740d2a423
-
SHA256
2d2c782650bc4a05b1814e5ec2eda1f1a1758ebc1f69a5c095facf737e805361
-
SHA512
2c898919aa63f843af6474e8141cf09779674fe1309b65920e5515f98479867dce43036dfe76625745742b6a66ff21d942b00cfa18007af087a08ab49f082fd9
-
SSDEEP
6144:hLpaAyYcLxV4PxZnP8gzdzGKs/LqgeW+8NDyejPr9pYSny:h9aAAsPr0gz05/LqoDyejPrI0y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MSFlacEncoder.dll
Files
-
MSFlacEncoder.dll.dll windows:10 windows x86 arch:x86
fd3edb4f17b329eee8969aaaa91f8505
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_initterm
_amsg_exit
_XcptFilter
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
memmove
memcpy
_unlock
_CxxThrowException
_callnewh
strcat_s
__dllonexit
_onexit
memcmp
?terminate@@YAXXZ
_except_handler4_common
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_vsnwprintf
frexp
_copysign
_wchmod
??1type_info@@UAE@XZ
_wutime64
qsort
strchr
_vsnprintf
strncmp
strtod
_lock
_vsnprintf_s
wcscpy_s
_errno
_strnicmp
_strdup
realloc
fclose
__iob_func
_wcsicmp
_strcmpi
strncpy_s
strnlen
calloc
_purecall
memcpy_s
malloc
wcsncpy_s
free
??_V@YAXPAX@Z
__CxxFrameHandler3
??3@YAXPAX@Z
_CIcos
_CIexp
_CIlog
_ftol2
_ftol2_sse
ceil
memchr
memset
oleaut32
VarUI4FromStr
api-ms-win-core-synch-l1-1-0
EnterCriticalSection
CreateSemaphoreExW
CreateEventW
LeaveCriticalSection
ReleaseSemaphore
WaitForSingleObject
InitializeCriticalSection
ReleaseMutex
ResetEvent
SetEvent
WaitForSingleObjectEx
OpenSemaphoreW
DeleteCriticalSection
CreateMutexExW
WaitForMultipleObjectsEx
api-ms-win-core-libraryloader-l1-2-0
GetProcAddress
SizeofResource
GetModuleHandleExW
FreeLibrary
LoadResource
GetModuleHandleW
LoadLibraryExW
GetModuleFileNameW
GetModuleFileNameA
FindResourceExW
DisableThreadLibraryCalls
api-ms-win-core-com-l1-1-0
CoTaskMemFree
PropVariantClear
PropVariantCopy
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
api-ms-win-core-string-l2-1-0
CharNextW
api-ms-win-core-errorhandling-l1-1-0
GetLastError
RaiseException
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
api-ms-win-core-registry-l1-1-0
RegDeleteValueW
RegQueryInfoKeyW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
api-ms-win-core-string-obsolete-l1-1-0
lstrcmpiW
api-ms-win-core-string-l1-1-0
WideCharToMultiByte
MultiByteToWideChar
api-ms-win-eventing-classicprovider-l1-1-0
TraceMessage
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-processthreads-l1-1-0
TlsSetValue
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
CreateThread
GetCurrentProcess
TlsGetValue
api-ms-win-core-heap-l1-1-0
HeapAlloc
HeapFree
GetProcessHeap
api-ms-win-core-localization-l1-2-0
FormatMessageW
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
OutputDebugStringA
OutputDebugStringW
DebugBreak
api-ms-win-eventing-provider-l1-1-0
EventWriteTransfer
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
GetTickCount
mfplat
MFCreateSample
MFCreateEventQueue
MFCreateTempFile
MFCreateMediaType
MFPutWorkItemEx
MFCreateMemoryBuffer
MFPutWorkItemEx2
MFUnlockPlatform
MFLockPlatform
MFGetSystemTime
MFGetCallStackTracingWeakReference
avrt
AvSetMmThreadCharacteristicsW
AvRevertMmThreadCharacteristics
Exports
Exports
??0Application@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0Application@Metadata@FLAC@@QAE@ABV012@@Z
??0Application@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0Application@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0Chain@Metadata@FLAC@@QAE@ABV012@@Z
??0CueSheet@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0CueSheet@Metadata@FLAC@@QAE@ABV012@@Z
??0CueSheet@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0CueSheet@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0Iterator@Metadata@FLAC@@QAE@ABV012@@Z
??0Padding@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0Padding@Metadata@FLAC@@QAE@ABV012@@Z
??0Padding@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0Padding@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0Picture@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0Picture@Metadata@FLAC@@QAE@ABV012@@Z
??0Picture@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0Picture@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0SeekTable@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0SeekTable@Metadata@FLAC@@QAE@ABV012@@Z
??0SeekTable@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0SeekTable@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0SimpleIterator@Metadata@FLAC@@QAE@ABV012@@Z
??0State@Stream@Decoder@FLAC@@QAE@W4FLAC__StreamDecoderState@@@Z
??0State@Stream@Encoder@FLAC@@QAE@W4FLAC__StreamEncoderState@@@Z
??0Status@Chain@Metadata@FLAC@@QAE@W4FLAC__Metadata_ChainStatus@@@Z
??0Status@SimpleIterator@Metadata@FLAC@@QAE@W4FLAC__Metadata_SimpleIteratorStatus@@@Z
??0StreamInfo@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0StreamInfo@Metadata@FLAC@@QAE@ABV012@@Z
??0StreamInfo@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0StreamInfo@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0Unknown@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0Unknown@Metadata@FLAC@@QAE@ABV012@@Z
??0Unknown@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0Unknown@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0VorbisComment@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0VorbisComment@Metadata@FLAC@@QAE@ABV012@@Z
??0VorbisComment@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0VorbisComment@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??4Application@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4Application@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4Application@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4Chain@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4CueSheet@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4CueSheet@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4CueSheet@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4Iterator@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4Padding@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4Padding@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4Padding@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4Picture@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4Picture@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4Picture@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4SeekTable@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4SeekTable@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4SeekTable@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4SimpleIterator@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4State@Stream@Decoder@FLAC@@QAEAAV0123@$$QAV0123@@Z
??4State@Stream@Decoder@FLAC@@QAEAAV0123@ABV0123@@Z
??4State@Stream@Encoder@FLAC@@QAEAAV0123@$$QAV0123@@Z
??4State@Stream@Encoder@FLAC@@QAEAAV0123@ABV0123@@Z
??4Status@Chain@Metadata@FLAC@@QAEAAV0123@$$QAV0123@@Z
??4Status@Chain@Metadata@FLAC@@QAEAAV0123@ABV0123@@Z
??4Status@SimpleIterator@Metadata@FLAC@@QAEAAV0123@$$QAV0123@@Z
??4Status@SimpleIterator@Metadata@FLAC@@QAEAAV0123@ABV0123@@Z
??4StreamInfo@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4StreamInfo@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4StreamInfo@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4Unknown@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4Unknown@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4Unknown@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4VorbisComment@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4VorbisComment@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4VorbisComment@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??8Application@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8Application@Metadata@FLAC@@QBE_NABV012@@Z
??8Application@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8CueSheet@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8CueSheet@Metadata@FLAC@@QBE_NABV012@@Z
??8CueSheet@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8Padding@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8Padding@Metadata@FLAC@@QBE_NABV012@@Z
??8Padding@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8Picture@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8Picture@Metadata@FLAC@@QBE_NABV012@@Z
??8Picture@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8Prototype@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8Prototype@Metadata@FLAC@@QBE_NABV012@@Z
??8Prototype@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8SeekTable@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8SeekTable@Metadata@FLAC@@QBE_NABV012@@Z
??8SeekTable@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8StreamInfo@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8StreamInfo@Metadata@FLAC@@QBE_NABV012@@Z
??8StreamInfo@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8Unknown@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8Unknown@Metadata@FLAC@@QBE_NABV012@@Z
??8Unknown@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8VorbisComment@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8VorbisComment@Metadata@FLAC@@QBE_NABV012@@Z
??8VorbisComment@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9Application@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9Application@Metadata@FLAC@@QBE_NABV012@@Z
??9Application@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9CueSheet@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9CueSheet@Metadata@FLAC@@QBE_NABV012@@Z
??9CueSheet@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9Padding@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9Padding@Metadata@FLAC@@QBE_NABV012@@Z
??9Padding@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9Picture@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9Picture@Metadata@FLAC@@QBE_NABV012@@Z
??9Picture@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9Prototype@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9Prototype@Metadata@FLAC@@QBE_NABV012@@Z
??9Prototype@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9SeekTable@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9SeekTable@Metadata@FLAC@@QBE_NABV012@@Z
??9SeekTable@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9StreamInfo@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9StreamInfo@Metadata@FLAC@@QBE_NABV012@@Z
??9StreamInfo@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9Unknown@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9Unknown@Metadata@FLAC@@QBE_NABV012@@Z
??9Unknown@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9VorbisComment@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9VorbisComment@Metadata@FLAC@@QBE_NABV012@@Z
??9VorbisComment@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??BPrototype@Metadata@FLAC@@QBEPBUFLAC__StreamMetadata@@XZ
??BState@Stream@Decoder@FLAC@@QBE?AW4FLAC__StreamDecoderState@@XZ
??BState@Stream@Encoder@FLAC@@QBE?AW4FLAC__StreamEncoderState@@XZ
??BStatus@Chain@Metadata@FLAC@@QBE?AW4FLAC__Metadata_ChainStatus@@XZ
??BStatus@SimpleIterator@Metadata@FLAC@@QBE?AW4FLAC__Metadata_SimpleIteratorStatus@@XZ
??BStream@Decoder@FLAC@@QBE_NXZ
??BStream@Encoder@FLAC@@QBE_NXZ
??_7Application@Metadata@FLAC@@6B@
??_7Chain@Metadata@FLAC@@6B@
??_7CueSheet@Metadata@FLAC@@6B@
??_7Iterator@Metadata@FLAC@@6B@
??_7Padding@Metadata@FLAC@@6B@
??_7Picture@Metadata@FLAC@@6B@
??_7SeekTable@Metadata@FLAC@@6B@
??_7SimpleIterator@Metadata@FLAC@@6B@
??_7StreamInfo@Metadata@FLAC@@6B@
??_7Unknown@Metadata@FLAC@@6B@
??_7VorbisComment@Metadata@FLAC@@6B@
?as_cstring@State@Stream@Decoder@FLAC@@QBEPBDXZ
?as_cstring@State@Stream@Encoder@FLAC@@QBEPBDXZ
?as_cstring@Status@Chain@Metadata@FLAC@@QBEPBDXZ
?as_cstring@Status@SimpleIterator@Metadata@FLAC@@QBEPBDXZ
?assign@Application@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@CueSheet@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@Padding@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@Picture@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@SeekTable@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@StreamInfo@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@Unknown@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@VorbisComment@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?get_isrc@Track@CueSheet@Metadata@FLAC@@QBEPBDXZ
?get_num_indices@Track@CueSheet@Metadata@FLAC@@QBEEXZ
?get_number@Track@CueSheet@Metadata@FLAC@@QBEEXZ
?get_offset@Track@CueSheet@Metadata@FLAC@@QBE_KXZ
?get_pre_emphasis@Track@CueSheet@Metadata@FLAC@@QBE_NXZ
?get_track@Track@CueSheet@Metadata@FLAC@@QBEPBUFLAC__StreamMetadata_CueSheet_Track@@XZ
?get_type@Track@CueSheet@Metadata@FLAC@@QBEIXZ
?is_valid@Prototype@Metadata@FLAC@@QBE_NXZ
?resolved_as_cstring@State@Stream@Decoder@FLAC@@QBEPBDABV234@@Z
?resolved_as_cstring@State@Stream@Encoder@FLAC@@QBEPBDABV234@@Z
?set_number@Track@CueSheet@Metadata@FLAC@@QAEXE@Z
?set_offset@Track@CueSheet@Metadata@FLAC@@QAEX_K@Z
?set_pre_emphasis@Track@CueSheet@Metadata@FLAC@@QAEX_N@Z
?set_reference@Prototype@Metadata@FLAC@@AAEX_N@Z
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 221KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ