56622e82a4cbe7893866f2637ec2651f39b9d99cd0d07408aafad56350a4cea5

Sharing

Copy URL

Twitter E-mail

General

Target

56622e82a4cbe7893866f2637ec2651f39b9d99cd0d07408aafad56350a4cea5
Size

46KB
MD5

f27af6fffff29a427b586f6223afc3cc
SHA1

170bf98a2ec231833a3dff369dbf0082d0570d77
SHA256

56622e82a4cbe7893866f2637ec2651f39b9d99cd0d07408aafad56350a4cea5
SHA512

8df4356b67499de9e33b8b48bf0c0d61cae00383ce786586a9d9df0c180f541a1440f38c5f1ebb2c1169006febcf810b84bdc6c6bc1a1e02f8f063e4ee6cee94
SSDEEP

768:/L40Gy309O4iqhZgKpJowpL++7DWGuTuEjrOzAb6XTbJGtp:/LEy3NkZgKpJowp/7SGauEjr96jbJyp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56622e82a4cbe7893866f2637ec2651f39b9d99cd0d07408aafad56350a4cea5

Files

56622e82a4cbe7893866f2637ec2651f39b9d99cd0d07408aafad56350a4cea5
.dll windows:6 windows x86 arch:x86

89226da00ed8cc83c8a55bd4af8177e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathCombineW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

DisableThreadLibraryCalls
QueryPerformanceCounter
UnhandledExceptionFilter
CreateFileW
DeleteFileW
GetFileSize
WriteFile
CloseHandle
GetLastError
lstrcmpW
lstrlenW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
InitializeSListHead
LoadLibraryW
lstrcmpiW
CreateProcessW
GetModuleHandleW
FileTimeToLocalFileTime
GetFileTime
SetFilePointer
RaiseException
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
GetSystemTimeAsFileTime
VirtualQuery
GlobalMemoryStatus
FileTimeToDosDateTime
lstrcpyW
SetUnhandledExceptionFilter
lstrcpynW
CreateDirectoryW
GetProcAddress
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess

user32

DestroyWindow
SendDlgItemMessageW
SetTimer
KillTimer
UpdateWindow
SetClassLongW
LoadImageW
wsprintfW
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageA
IsWindow
EnumChildWindows
CreateDialogParamW
IsDialogMessageW
EndDialog
GetWindowRect
CopyRect
OffsetRect
GetDesktopWindow
GetParent
GetClassNameW
MessageBoxW
GetWindowTextW
SetWindowTextW
EnableWindow
CharNextW
CheckDlgButton
SetDlgItemTextW
GetDlgItem
SendMessageW
PostMessageW
SetWindowPos

advapi32

GetUserNameW

shell32

SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

_CxxThrowException
__CxxFrameHandler3
memset
wcsrchr
_except_handler3
__std_exception_copy
_except_handler4_common
__std_type_info_destroy_list
__std_exception_destroy
_purecall
memcmp
memcpy

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_cexit
_initterm
_initterm_e
_initialize_onexit_table
_initialize_narrow_environment
_execute_onexit_table
_seh_filter_dll
_register_onexit_function
_configure_narrow_argv

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-convert-l1-1-0

_wtoi
_itow

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

Exports

Exports

StartHandler
winampGetGeneralPurposePlugin

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89226da00ed8cc83c8a55bd4af8177e1

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

version

kernel32

user32

advapi32

shell32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 33KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 33KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 2KB - Virtual size: 2KB