372654eb0783aa56333a2594d68af3d0483e79d0d25c145dfbfb568285a5bbfb

Sharing

Copy URL

Twitter E-mail

General

Target

372654eb0783aa56333a2594d68af3d0483e79d0d25c145dfbfb568285a5bbfb
Size

349KB
MD5

f3c32e1f81aeae4cf026f64631a4d5b1
SHA1

09c09187eb5e9c0fa404cecc4797fde257528e2e
SHA256

372654eb0783aa56333a2594d68af3d0483e79d0d25c145dfbfb568285a5bbfb
SHA512

7f2cd570f56935abf615f11be2cc14aadef8c4407c99a8c090a22cccae1fb54c198d818cea5b3d3782d504d3b32791754737fa8221e02269f2163f369e7451d3
SSDEEP

6144:wpOA+g2PGyqZOYXb7ywMIi2vxiZo5MNXVbBOK/SKKmz7E9XBa:ICgAGyq/b7ni2vxiZo5MPBOdyE9x

Score

1^/10

Malware Config

Signatures

Files

372654eb0783aa56333a2594d68af3d0483e79d0d25c145dfbfb568285a5bbfb
.dll windows:4 windows x86 arch:x86

eabcad410f1cf9fb666affa459f11a49

Code Sign

82:7d:84:30:83:bd:8c:e9:9d:45:f2:0a:79:59:0e:45:c0:0e:e0:26
Signer

Actual PE Digest

82:7d:84:30:83:bd:8c:e9:9d:45:f2:0a:79:59:0e:45:c0:0e:e0:26

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

gdi32

BitBlt
ChoosePixelFormat
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreatePalette
DeleteDC
DeleteObject
DescribePixelFormat
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetSystemPaletteEntries
GetSystemPaletteUse
RealizePalette
SelectObject
SelectPalette
SetDIBColorTable
SetDeviceGammaRamp
SetPaletteEntries
SetPixelFormat
SetSystemPaletteUse
SwapBuffers
UnrealizeObject

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateFileW
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentVariableA
GetLastError
GetLocaleInfoA
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
ReleaseMutex
ReleaseSemaphore
ResetEvent
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TerminateThread
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

msvcrt

_strdup
_wcsdup
__dllonexit
_amsg_exit
_beginthreadex
_endthreadex
_errno
_initterm
_iob
_lock
_onexit
_stricmp
_unlock
_vsnprintf
_winmajor
abort
atof
atoi
calloc
fclose
ferror
fprintf
fread
free
fseek
ftell
fwrite
islower
isspace
isupper
malloc
memcmp
memcpy
memmove
memset
qsort
raise
realloc
signal
sscanf
strchr
strcmp
strlen
strncmp
strstr
strtok
vfprintf
wcscmp
wcscpy

ole32

CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree

user32

AdjustWindowRect
AdjustWindowRectEx
BeginPaint
CallWindowProcA
ChangeDisplaySettingsA
ClientToScreen
ClipCursor
CreateCursor
CreateIconFromResourceEx
CreateWindowExA
DefWindowProcA
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageA
EndPaint
EnumDisplaySettingsA
GetClassInfoA
GetClientRect
GetCursor
GetCursorPos
GetDC
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutNameA
GetKeyboardState
GetMenu
GetMessageA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
InvalidateRect
IsZoomed
KillTimer
LoadImageA
LoadKeyboardLayoutA
MapVirtualKeyA
MapVirtualKeyExA
MapWindowPoints
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RegisterClassA
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageA
SetCapture
SetClassLongA
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
ToAsciiEx
ToUnicode
TranslateMessage
UnregisterClassA
WindowFromPoint

winmm

joyGetDevCapsA
joyGetNumDevs
joyGetPosEx
mciGetErrorStringA
mciSendCommandA
timeBeginPeriod
timeEndPeriod
timeGetTime
timeKillEvent
timeSetEvent
waveOutClose
waveOutGetErrorTextA
waveOutOpen
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite

avcodec-53

av_destruct_packet
av_new_packet
avpicture_fill
avpicture_get_size
avpicture_layout

avfilter-2

av_abuffersink_params_alloc
av_buffersink_get_buffer_ref
av_buffersink_params_alloc
avfilter_all_channel_layouts
avfilter_get_by_name
avfilter_graph_alloc
avfilter_graph_config
avfilter_graph_create_filter
avfilter_graph_free
avfilter_graph_parse
avfilter_inout_free
avfilter_link
avfilter_register_all
avfilter_unref_buffer

avformat-53

av_register_input_format
av_register_output_format
av_set_pts_info
avformat_new_stream

avutil-51

av_default_item_name
av_free
av_freep
av_get_bytes_per_sample
av_get_channel_layout_nb_channels
av_get_pix_fmt_name
av_log
av_malloc
av_mallocz
av_parse_video_rate
av_parse_video_size
av_pix_fmt_descriptors
av_rescale_q
av_strdup

Exports

Exports

avdevice_configuration
avdevice_license
avdevice_register_all
avdevice_version

Sections

.text
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eabcad410f1cf9fb666affa459f11a49

Code Sign

82:7d:84:30:83:bd:8c:e9:9d:45:f2:0a:79:59:0e:45:c0:0e:e0:26Signer

Headers

File Characteristics

Imports

advapi32

avicap32

gdi32

kernel32

msvcrt

ole32

user32

winmm

avcodec-53

avfilter-2

avformat-53

avutil-51

Exports

Exports

Sections

.text Size: 255KB - Virtual size: 255KB

.data Size: 6KB - Virtual size: 5KB

.rdata Size: 59KB - Virtual size: 59KB

.bss Size: - Virtual size: 31KB

.edata Size: 512B - Virtual size: 175B

.idata Size: 8KB - Virtual size: 7KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 10KB - Virtual size: 9KB

82:7d:84:30:83:bd:8c:e9:9d:45:f2:0a:79:59:0e:45:c0:0e:e0:26
Signer

.text
Size: 255KB - Virtual size: 255KB

.data
Size: 6KB - Virtual size: 5KB

.rdata
Size: 59KB - Virtual size: 59KB

.bss
Size: - Virtual size: 31KB

.edata
Size: 512B - Virtual size: 175B

.idata
Size: 8KB - Virtual size: 7KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 10KB - Virtual size: 9KB