374ed3e0d5a31d16c13005d23c0928b2a5d0ff110f7475ed1997d0c6860b8466

Sharing

Copy URL Twitter E-mail

General

Target

374ed3e0d5a31d16c13005d23c0928b2a5d0ff110f7475ed1997d0c6860b8466
Size

137KB
MD5

fdb1c78f9f3214bc767b1a6c9c8057d4
SHA1

0806f94ac6cd1cd328a09181a1937fcedec32a98
SHA256

374ed3e0d5a31d16c13005d23c0928b2a5d0ff110f7475ed1997d0c6860b8466
SHA512

a2343470d3453b8d4cf81cf7581be77addcc0131b4b3e93497ec1f848fe71aa04e0c824487f85fb24416efb00754b5477362d6ebfda1a32f5675d9feab6464e9
SSDEEP

1536:uNJbeb20kkzJk2oE05T/d63H76yX/Fg+6+O1tvMmSBDWNgQVCXoCzg6mhobKda4B:yJbey0k12uLd63FKhGbqjfT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
374ed3e0d5a31d16c13005d23c0928b2a5d0ff110f7475ed1997d0c6860b8466

Files

374ed3e0d5a31d16c13005d23c0928b2a5d0ff110f7475ed1997d0c6860b8466
.dll windows:5 windows x86 arch:x86

3315a3ef497c924aa8294035c2007c53

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
SetThreadPriority
CreateThread
lstrcpynA
CloseHandle
TerminateThread
WaitForSingleObject
Sleep
lstrcpynW
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent

user32

CharPrevW
PostMessageA
MessageBoxA
SendMessageA
MessageBoxIndirectW
CharNextW

msvcr90

floor
fread
ftell
fseek
ungetc
_fstat64i32
_fileno
fwrite
fclose
atoi
_wfopen
_wcsicmp
_stricmp
memmove
strrchr
memcpy
_CIpow
_purecall
fopen
_setmode
__iob_func
realloc
strncpy
strncmp
sprintf
isdigit
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
memset
malloc
free
_vsnprintf
_vsnwprintf
_atof_l

Exports

Exports

winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_open
winampGetExtendedRead_setTime
winampGetInModule2
winampSetExtendedFileInfoW
winampUninstallPlugin
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3315a3ef497c924aa8294035c2007c53

Headers

File Characteristics

Imports

kernel32

user32

msvcr90

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 104KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 512B - Virtual size: 112KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 104KB - Virtual size: 104KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 512B - Virtual size: 112KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 3KB