edff4eadd05c0ee30342186d6376f9098d3b2438c533c2f9a8b86bc79c5379bbN

Sharing

Copy URL

Twitter E-mail

General

Target

edff4eadd05c0ee30342186d6376f9098d3b2438c533c2f9a8b86bc79c5379bbN
Size

69KB
MD5

c4d691aef54b4b46663abb97e1c7c810
SHA1

02b3278ddaba60ce21172e02d00a12f770e8230d
SHA256

edff4eadd05c0ee30342186d6376f9098d3b2438c533c2f9a8b86bc79c5379bb
SHA512

1943ca684d46d2a50767de172e631c8befa04b7b44d2d7b43c2a509ae944b0058510e439f8bc751a0ac292b921e8b05a760570808566ab696987f2517faf197f
SSDEEP

1536:2qIhu/A4zet8vHpYc8/0x8PxS33ouml95MRkgu0telIsC7TPxvP46:1Ih0A4zg8/pYHS4uRuee6sCfxo6

Score

1^/10

Malware Config

Signatures

Files

edff4eadd05c0ee30342186d6376f9098d3b2438c533c2f9a8b86bc79c5379bbN
.dll windows:6 windows x86 arch:x86

6b445178875475faf9c6b7a82039165e

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2013 12:00

Not After

15-01-2038 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:d4:bf:5a:52:9c:72:59:97:e0:f6:c5:26:49:5d:2f
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

15-06-2022 00:00

Not After

12-06-2024 23:59

Subject

CN=Winamp SA,O=Winamp SA,L=Bruxelles,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

00:ec:a1:51:cc:75:b8:df:9a:8e:72:53:9d:f0:0f:a2:f0:eb:96:c3
Signer

Actual PE Digest

00:ec:a1:51:cc:75:b8:df:9a:8e:72:53:9d:f0:0f:a2:f0:eb:96:c3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathAppendW
PathFileExistsW
PathCombineW
PathRemoveExtensionW
PathStripPathW
PathFindExtensionW

kernel32

InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
DisableThreadLibraryCalls
GetPrivateProfileStringW
WritePrivateProfileStringW
WideCharToMultiByte
CompareFileTime
GetFileAttributesExW
GetLastError
lstrcmpA
lstrcmpiW
lstrcpynW
lstrlenA
CompareStringW
MultiByteToWideChar
MulDiv
CreateDirectoryW
CloseHandle
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
CreateThread
SetThreadPriority
GetTickCount
GetModuleHandleW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SleepEx
WaitForMultipleObjects
CreateFileW
DeleteFileW
GetFileSize
GetTempFileNameW
ReadFile
SetFilePointer
WriteFile
GetTempPathW
GetOverlappedResult
CancelIo
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

user32

SendMessageW
IsWindow
MessageBoxIndirectW
PostMessageW
GetDlgItemTextW
EndDialog
SetDlgItemTextW

libmp4v2

MP4Read
MP4GetTrackNumberOfChunks
MP4GetTrackAudioMpeg4Type
MP4GetTrackEsdsObjectTypeId
MP4GetTrackESConfiguration
MP4GetTrackBytesProperty
MP4GetMetadataFreeForm
MP4GetTrackDuration
MP4GetSampleTime
MP4ConvertFromTrackTimestamp
MP4GetTrackMediaDataName
MP4GetMetadataCoverArt
MP4SetMetadataCoverArt
MP4SetMetadataFreeForm
MP4DeleteMetadataAlbumArtist
MP4GetMetadataAlbumArtist
MP4SetMetadataAlbumArtist
MP4DeleteMetadataTempo
MP4GetMetadataTempo
MP4SetMetadataTempo
MP4DeleteMetadataGrouping
MP4GetMetadataGrouping
MP4SetMetadataGrouping
MP4DeleteMetadataCoverArt
MP4GetMetadataGenre
MP4SetMetadataGenre
MP4DeleteMetadataDisk
MP4GetMetadataDisk
MP4ConvertToTrackDuration
MP4DeleteMetadataTrack
MP4GetMetadataTrack
MP4SetMetadataTrack
MP4DeleteMetadataAlbum
MP4GetSampleIdFromTime
MP4GetTrackMaxSampleSize
MP4ReadSample
MP4GetTrackNumberOfSamples
MP4PrintVideoInfo
MP4GetMetadataAlbum
MP4SetMetadataAlbum
MP4DeleteMetadataYear
MP4GetMetadataYear
MP4SetMetadataYear
MP4PrintAudioInfo
MP4Get3GPMetadataInteger
MP4DeleteMetadataTool
MP4GetMetadataTool
MP4SetMetadataTool
MP4Get3GPMetadata
MP4DeleteMetadataComment
MP4GetMetadataComment
MP4SetMetadataComment
MP4DeleteMetadataWriter
MP4GetMetadataWriter
MP4SetMetadataWriter
MP4DeleteMetadataRating
MP4GetMetadataRating
MP4SetMetadataRating
MP4DeleteMetadataArtist
MP4GetMetadataArtist
MP4SetMetadataArtist
MP4DeleteMetadataName
MP4GetMetadataName
MP4SetMetadataName
MP4GetTrackVideoHeight
MP4SetMetadataDisk
MP4DeleteMetadataFreeForm
MP4GetTrackVideoWidth
MP4GetTrackBitRate
MP4ReadChunk
MP4Close
MP4ReadEx
MP4Modify
MP4GetTrackTimeScale
MP4GetTrackType
MP4FindTrackId
MP4GetNumberOfTracks
MP4GetStringProperty
MP4Optimize
MP4GetChunkIdFromTime
MP4Free
MP4DeleteMetadataGenre

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memset
_purecall
wcschr
__CxxFrameHandler3
__std_terminate
strstr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
_except_handler4_common
__std_type_info_destroy_list
memcpy

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc
calloc
realloc

api-ms-win-crt-string-l1-1-0

strlen
_strdup
strncmp
_stricmp
_wcsicmp
_wcsnicmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsprintf

api-ms-win-crt-convert-l1-1-0

atoi
_strtoui64
wcstoul
_wtoi
_wtof_l
_wcstoui64

api-ms-win-crt-math-l1-1-0

log10
pow

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_crt_atexit
_cexit
_initialize_onexit_table
_seh_filter_dll
_initterm
_initterm_e
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv

Exports

Exports

winampGetExtendedFileInfoW
winampGetExtendedRead_close
winampGetExtendedRead_getData
winampGetExtendedRead_openW
winampGetExtendedRead_openW_float
winampGetExtendedRead_setTime
winampGetInModule2
winampSetExtendedFileInfoW
winampUseUnifiedFileInfoDlg
winampWriteExtendedFileInfo

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b445178875475faf9c6b7a82039165e

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

08:d4:bf:5a:52:9c:72:59:97:e0:f6:c5:26:49:5d:2fCertificate

Extended Key Usages

Key Usages

00:ec:a1:51:cc:75:b8:df:9a:8e:72:53:9d:f0:0f:a2:f0:eb:96:c3Signer

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

libmp4v2

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 1024B - Virtual size: 6KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 3KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

08:d4:bf:5a:52:9c:72:59:97:e0:f6:c5:26:49:5d:2f
Certificate

00:ec:a1:51:cc:75:b8:df:9a:8e:72:53:9d:f0:0f:a2:f0:eb:96:c3
Signer

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 1024B - Virtual size: 6KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 3KB