MSFLACEncoder.pdb
Static task
static1
Behavioral task
behavioral1
Sample
MSFlacEncoder.dll
Resource
win10v2004-20240508-en
General
-
Target
MSFlacEncoder.dll
-
Size
218KB
-
MD5
e82c80965da1feb4dbaba407adc533b2
-
SHA1
0806c3a507e1f8963618217b1dd50409dca97b4d
-
SHA256
4336e3b528c11ad8b6c15b806de9a908969596853fe757ef7140eab661cae707
-
SHA512
37159d66b271786ca511e9677de6aaebad449502d9986dc554f88ca2ba492d569e70f8032f36db80ddad670a5bae8743f30198564f61e0c90ead918dd30ff731
-
SSDEEP
6144:WF0UIY2C8WuiWQRdNTocKTqTV2AISEyejPrZ2YCg:WF0UIY2CLuQPN8FT02AISEyejPrtL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MSFlacEncoder.dll
Files
-
MSFlacEncoder.dll.dll windows:10 windows x86 arch:x86
2bc37f16646ba7cab1400a1bbc4deef2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
memchr
_strnicmp
strtod
strncmp
strchr
_except_handler4_common
_onexit
__dllonexit
_unlock
_lock
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_initterm
_amsg_exit
_XcptFilter
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
_errno
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
??3@YAXPAX@Z
_strdup
memcpy
__CxxFrameHandler3
_CxxThrowException
_callnewh
memset
strcat_s
wcscpy_s
_vsnprintf
frexp
_copysign
??0exception@@QAE@ABV0@@Z
realloc
fclose
calloc
_purecall
memmove
memcpy_s
malloc
wcsncpy_s
__iob_func
_wcsicmp
_strcmpi
_wchmod
_wutime64
qsort
free
??_V@YAXPAX@Z
_CIcos
_CIexp
_CIlog
_ftol2
_ftol2_sse
ceil
memcmp
oleaut32
VarUI4FromStr
api-ms-win-core-synch-l1-2-0
LeaveCriticalSection
DeleteCriticalSection
WaitForMultipleObjectsEx
Sleep
ResetEvent
InitializeCriticalSection
EnterCriticalSection
SetEvent
WaitForSingleObject
CreateEventW
api-ms-win-core-libraryloader-l1-2-0
LoadLibraryExW
GetProcAddress
FindResourceExW
GetModuleHandleW
FreeLibrary
LoadResource
GetModuleFileNameW
DisableThreadLibraryCalls
SizeofResource
api-ms-win-core-com-l1-1-1
CoTaskMemFree
PropVariantCopy
PropVariantClear
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
api-ms-win-core-string-l2-1-0
CharNextW
api-ms-win-core-errorhandling-l1-1-1
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
GetLastError
api-ms-win-core-registry-l1-1-0
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
api-ms-win-core-string-obsolete-l1-1-0
lstrcmpiW
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
WideCharToMultiByte
api-ms-win-eventing-classicprovider-l1-1-0
TraceMessage
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-processthreads-l1-1-2
TlsSetValue
GetCurrentThreadId
CreateThread
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
TlsGetValue
api-ms-win-core-heap-l1-2-0
HeapAlloc
HeapFree
GetProcessHeap
api-ms-win-eventing-provider-l1-1-0
EventWrite
api-ms-win-core-sysinfo-l1-2-1
GetTickCount
GetSystemTimeAsFileTime
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-debug-l1-1-1
DebugBreak
IsDebuggerPresent
OutputDebugStringA
mfplat
MFPutWorkItemEx
MFGetCallStackTracingWeakReference
MFCreateMemoryBuffer
MFCreateMediaType
MFLockPlatform
MFUnlockPlatform
MFCreateTempFile
MFCreateEventQueue
MFCreateSample
avrt
AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW
Exports
Exports
??0Application@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0Application@Metadata@FLAC@@QAE@ABV012@@Z
??0Application@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0Application@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0Chain@Metadata@FLAC@@QAE@ABV012@@Z
??0CueSheet@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0CueSheet@Metadata@FLAC@@QAE@ABV012@@Z
??0CueSheet@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0CueSheet@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0Iterator@Metadata@FLAC@@QAE@ABV012@@Z
??0Padding@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0Padding@Metadata@FLAC@@QAE@ABV012@@Z
??0Padding@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0Padding@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0Picture@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0Picture@Metadata@FLAC@@QAE@ABV012@@Z
??0Picture@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0Picture@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0SeekTable@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0SeekTable@Metadata@FLAC@@QAE@ABV012@@Z
??0SeekTable@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0SeekTable@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0SimpleIterator@Metadata@FLAC@@QAE@ABV012@@Z
??0State@Stream@Decoder@FLAC@@QAE@W4FLAC__StreamDecoderState@@@Z
??0State@Stream@Encoder@FLAC@@QAE@W4FLAC__StreamEncoderState@@@Z
??0Status@Chain@Metadata@FLAC@@QAE@W4FLAC__Metadata_ChainStatus@@@Z
??0Status@SimpleIterator@Metadata@FLAC@@QAE@W4FLAC__Metadata_SimpleIteratorStatus@@@Z
??0StreamInfo@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0StreamInfo@Metadata@FLAC@@QAE@ABV012@@Z
??0StreamInfo@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0StreamInfo@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0Unknown@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0Unknown@Metadata@FLAC@@QAE@ABV012@@Z
??0Unknown@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0Unknown@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??0VorbisComment@Metadata@FLAC@@QAE@ABUFLAC__StreamMetadata@@@Z
??0VorbisComment@Metadata@FLAC@@QAE@ABV012@@Z
??0VorbisComment@Metadata@FLAC@@QAE@PAUFLAC__StreamMetadata@@_N@Z
??0VorbisComment@Metadata@FLAC@@QAE@PBUFLAC__StreamMetadata@@@Z
??4Application@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4Application@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4Application@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4Chain@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4CueSheet@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4CueSheet@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4CueSheet@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4Iterator@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4Padding@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4Padding@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4Padding@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4Picture@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4Picture@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4Picture@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4SeekTable@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4SeekTable@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4SeekTable@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4SimpleIterator@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4State@Stream@Decoder@FLAC@@QAEAAV0123@$$QAV0123@@Z
??4State@Stream@Decoder@FLAC@@QAEAAV0123@ABV0123@@Z
??4State@Stream@Encoder@FLAC@@QAEAAV0123@$$QAV0123@@Z
??4State@Stream@Encoder@FLAC@@QAEAAV0123@ABV0123@@Z
??4Status@Chain@Metadata@FLAC@@QAEAAV0123@$$QAV0123@@Z
??4Status@Chain@Metadata@FLAC@@QAEAAV0123@ABV0123@@Z
??4Status@SimpleIterator@Metadata@FLAC@@QAEAAV0123@$$QAV0123@@Z
??4Status@SimpleIterator@Metadata@FLAC@@QAEAAV0123@ABV0123@@Z
??4StreamInfo@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4StreamInfo@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4StreamInfo@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4Unknown@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4Unknown@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4Unknown@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??4VorbisComment@Metadata@FLAC@@QAEAAV012@ABUFLAC__StreamMetadata@@@Z
??4VorbisComment@Metadata@FLAC@@QAEAAV012@ABV012@@Z
??4VorbisComment@Metadata@FLAC@@QAEAAV012@PBUFLAC__StreamMetadata@@@Z
??8Application@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8Application@Metadata@FLAC@@QBE_NABV012@@Z
??8Application@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8CueSheet@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8CueSheet@Metadata@FLAC@@QBE_NABV012@@Z
??8CueSheet@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8Padding@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8Padding@Metadata@FLAC@@QBE_NABV012@@Z
??8Padding@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8Picture@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8Picture@Metadata@FLAC@@QBE_NABV012@@Z
??8Picture@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8Prototype@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8Prototype@Metadata@FLAC@@QBE_NABV012@@Z
??8Prototype@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8SeekTable@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8SeekTable@Metadata@FLAC@@QBE_NABV012@@Z
??8SeekTable@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8StreamInfo@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8StreamInfo@Metadata@FLAC@@QBE_NABV012@@Z
??8StreamInfo@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8Unknown@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8Unknown@Metadata@FLAC@@QBE_NABV012@@Z
??8Unknown@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??8VorbisComment@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??8VorbisComment@Metadata@FLAC@@QBE_NABV012@@Z
??8VorbisComment@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9Application@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9Application@Metadata@FLAC@@QBE_NABV012@@Z
??9Application@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9CueSheet@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9CueSheet@Metadata@FLAC@@QBE_NABV012@@Z
??9CueSheet@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9Padding@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9Padding@Metadata@FLAC@@QBE_NABV012@@Z
??9Padding@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9Picture@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9Picture@Metadata@FLAC@@QBE_NABV012@@Z
??9Picture@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9Prototype@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9Prototype@Metadata@FLAC@@QBE_NABV012@@Z
??9Prototype@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9SeekTable@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9SeekTable@Metadata@FLAC@@QBE_NABV012@@Z
??9SeekTable@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9StreamInfo@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9StreamInfo@Metadata@FLAC@@QBE_NABV012@@Z
??9StreamInfo@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9Unknown@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9Unknown@Metadata@FLAC@@QBE_NABV012@@Z
??9Unknown@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??9VorbisComment@Metadata@FLAC@@QBE_NABUFLAC__StreamMetadata@@@Z
??9VorbisComment@Metadata@FLAC@@QBE_NABV012@@Z
??9VorbisComment@Metadata@FLAC@@QBE_NPBUFLAC__StreamMetadata@@@Z
??BPrototype@Metadata@FLAC@@QBEPBUFLAC__StreamMetadata@@XZ
??BState@Stream@Decoder@FLAC@@QBE?AW4FLAC__StreamDecoderState@@XZ
??BState@Stream@Encoder@FLAC@@QBE?AW4FLAC__StreamEncoderState@@XZ
??BStatus@Chain@Metadata@FLAC@@QBE?AW4FLAC__Metadata_ChainStatus@@XZ
??BStatus@SimpleIterator@Metadata@FLAC@@QBE?AW4FLAC__Metadata_SimpleIteratorStatus@@XZ
??BStream@Decoder@FLAC@@QBE_NXZ
??BStream@Encoder@FLAC@@QBE_NXZ
??_7Application@Metadata@FLAC@@6B@
??_7Chain@Metadata@FLAC@@6B@
??_7CueSheet@Metadata@FLAC@@6B@
??_7Iterator@Metadata@FLAC@@6B@
??_7Padding@Metadata@FLAC@@6B@
??_7Picture@Metadata@FLAC@@6B@
??_7SeekTable@Metadata@FLAC@@6B@
??_7SimpleIterator@Metadata@FLAC@@6B@
??_7StreamInfo@Metadata@FLAC@@6B@
??_7Unknown@Metadata@FLAC@@6B@
??_7VorbisComment@Metadata@FLAC@@6B@
?as_cstring@State@Stream@Decoder@FLAC@@QBEPBDXZ
?as_cstring@State@Stream@Encoder@FLAC@@QBEPBDXZ
?as_cstring@Status@Chain@Metadata@FLAC@@QBEPBDXZ
?as_cstring@Status@SimpleIterator@Metadata@FLAC@@QBEPBDXZ
?assign@Application@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@CueSheet@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@Padding@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@Picture@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@SeekTable@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@StreamInfo@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@Unknown@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?assign@VorbisComment@Metadata@FLAC@@QAEAAV123@PAUFLAC__StreamMetadata@@_N@Z
?get_isrc@Track@CueSheet@Metadata@FLAC@@QBEPBDXZ
?get_num_indices@Track@CueSheet@Metadata@FLAC@@QBEEXZ
?get_number@Track@CueSheet@Metadata@FLAC@@QBEEXZ
?get_offset@Track@CueSheet@Metadata@FLAC@@QBE_KXZ
?get_pre_emphasis@Track@CueSheet@Metadata@FLAC@@QBE_NXZ
?get_track@Track@CueSheet@Metadata@FLAC@@QBEPBUFLAC__StreamMetadata_CueSheet_Track@@XZ
?get_type@Track@CueSheet@Metadata@FLAC@@QBEIXZ
?is_valid@Prototype@Metadata@FLAC@@QBE_NXZ
?resolved_as_cstring@State@Stream@Decoder@FLAC@@QBEPBDABV234@@Z
?resolved_as_cstring@State@Stream@Encoder@FLAC@@QBEPBDABV234@@Z
?set_number@Track@CueSheet@Metadata@FLAC@@QAEXE@Z
?set_offset@Track@CueSheet@Metadata@FLAC@@QAEX_K@Z
?set_pre_emphasis@Track@CueSheet@Metadata@FLAC@@QAEX_N@Z
?set_reference@Prototype@Metadata@FLAC@@AAEX_N@Z
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ