pmv_testdateien[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
pmv_testdateien.zip
Size 176.5MB
Sample261027-rd82fsdw9w
SHA256 7d56f1e5fd7af2b577da9620c894e512365432c9a461c5f962be7913f498bda8
MD5 1e981e7abc327c35cb11d1a96991acb7
SHA1 f5c399325f9365b7d116afa340638dfb82a365a9
SHA512 566c31b3a14c462fd5c3268a3badab6612aef0e81b0f742a7dac936c5f0d731b270c52f73c82b4dd146c499ec88512139148fac6c72a4d10a64d432db8cf848c
SSDEEP 3145728:LbWvb/s3t84LbKCktZjPWf2ARM5cLBsPw936M2rVPQkd7C8zJ7dljL4KRj15zP6R:ODU3trLWCktNWOAC5cLBj93IrVPQkdZw
TLSH
T1399833DEC761F446CD66B27F3DE5D28D32F461029EC349444F189B6BF1EFA6A10A801A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

pyinstaller

Malware Config

Signatures

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
static1/unpack001/pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/Auto PMV Maker.exe	pyinstaller

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/Auto PMV Maker.exe
unpack001/pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/ffmpeg/bin/ffmpeg.exe
unpack001/pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/ffmpeg/bin/ffprobe.exe

File Explorer

pmv_testdateien.zip

.zip 176.5MB
pmv_testdateien/ANLEITUNG.txt

559B
pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/Auto PMV Maker.exe

.exe 11.2MB
auto_pmv_maker.pyc

48KB
pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/README.txt

1KB
pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/ffmpeg/bin/ffmpeg.exe

.exe 211.9MB
pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/ffmpeg/bin/ffprobe.exe

.exe 211.7MB
pmv_testdateien/Beat_120BPM.mp3

143KB
pmv_testdateien/Beat_120BPM.wav

1.7MB
pmv_testdateien/Clip_01.mp4

6KB
pmv_testdateien/Clip_02.mp4

7KB
pmv_testdateien/Clip_03.mp4

6KB
pmv_testdateien/Clip_04.mp4

6KB
pmv_testdateien/Clip_05.mp4

6KB

pmv_testdateien.zip

SHA256 7d56f1e5fd7af2b577da9620c894e512365432c9a461c5f962be7913f498bda8
MD5 1e981e7abc327c35cb11d1a96991acb7
SHA1 f5c399325f9365b7d116afa340638dfb82a365a9
SHA512 566c31b3a14c462fd5c3268a3badab6612aef0e81b0f742a7dac936c5f0d731b270c52f73c82b4dd146c499ec88512139148fac6c72a4d10a64d432db8cf848c
SSDEEP 3145728:LbWvb/s3t84LbKCktZjPWf2ARM5cLBsPw936M2rVPQkd7C8zJ7dljL4KRj15zP6R:ODU3trLWCktNWOAC5cLBj93IrVPQkdZw
TLSH
T1399833DEC761F446CD66B27F3DE5D28D32F461029EC349444F189B6BF1EFA6A10A801A
MD5 SHA1 SHA512 SSDEEP TLSH

pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/Auto PMV Maker.exe

IMPHASH e3e80a143805ea18936c8f612e25d363
SHA256 42a57be7e168523661f47c4caccd67e8ea020f9dee7f9d4c1d18ac686ebe0aad
MD5 03111d6bf3a3186f912fe04b5975a707
SHA1 a9974d1fe2f49860d8e2cce5f758f73cdff0e7b2
SHA512 bfddd48e50dd77830c2ecae6aa0bf1708581b8e6ac0c11f5416ff837bd9553448f3b6627bd63e950c31d80ab4162642643cdee027fd301bd151b2faa77c348fb
SSDEEP 196608:itz1AEZu7NUxuBwB9drbdXQaN+MofR4RmhdeukWLHswqMpCTFYE7z7:41FSUx/hrbdXQfM6R4RmhdeXeHswqMiJ
TLSH
T115C63384F79405E9E46B213D58E4470BD3E17D220BA5CADB1BF40E292E772E4ED39722
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Detects Pyinstaller

pyinstaller
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

59248

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

CreateWindowExW ShutdownBlockReasonCreate MsgWaitForMultipleObjects ShowWindow DestroyWindow RegisterClassW DefWindowProcW PeekMessageW DispatchMessageW TranslateMessage GetMonitorInfoW MonitorFromPoint GetCursorPos GetSystemMetrics PostMessageW GetMessageW MessageBoxW MessageBoxA SystemParametersInfoW DestroyIcon SetWindowLongPtrW GetWindowLongPtrW GetClientRect InvalidateRect ReleaseDC GetDC DrawTextW GetDialogBaseUnits EndDialog DialogBoxIndirectParamW MoveWindow SendMessageW

comctl32

ord380

kernel32

GetACP IsValidCodePage GetStringTypeW GetFileAttributesExW SetEnvironmentVariableW FlushFileBuffers LCMapStringW CompareStringW VirtualProtect GetCurrentDirectoryW HeapAlloc GetFileSizeEx GetConsoleOutputCP GetOEMCP GetCPInfo GetLastError FreeLibrary GetProcAddress LoadLibraryExW GetModuleHandleW MulDiv FormatMessageW CloseHandle GetCurrentProcess GetModuleFileNameW SetDllDirectoryW GetEnvironmentStringsW SetErrorMode GetCurrentProcessId OpenProcess QueryFullProcessImageNameW CreateToolhelp32Snapshot Process32FirstW Process32NextW CreateDirectoryW GetCommandLineW GetEnvironmentVariableW ExpandEnvironmentStringsW DeleteFileW FindClose FindFirstFileW FindNextFileW GetDriveTypeW RemoveDirectoryW GetTempPathW QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObject Sleep TerminateProcess GetExitCodeProcess CreateProcessW GetStartupInfoW LocalFree SetConsoleCtrlHandler K32EnumProcessModules K32GetModuleFileNameExW CreateFileW FindFirstFileExW GetFinalPathNameByHandleW MultiByteToWideChar WideCharToMultiByte SetFilePointerEx FreeEnvironmentStringsW GetProcessHeap GetTimeZoneInformation HeapSize HeapReAlloc WriteConsoleW SetEndOfFile CreateSymbolicLinkW GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetCommandLineA GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ReadFile GetFullPathNameW SetStdHandle GetStdHandle WriteFile ExitProcess GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapFree GetConsoleMode ReadConsoleW

advapi32

GetTokenInformation OpenProcessToken ConvertSidToStringSidW ConvertStringSecurityDescriptorToSecurityDescriptorW

gdi32

SelectObject DeleteObject CreateFontIndirectW

Name

.text

Size

200KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

82KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

61KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/ffmpeg/bin/ffmpeg.exe

IMPHASH 25d2f04df1ea7d87f7f1790c06536830
SHA256 57c56e369d5b4873b4d93fc1a1d833cb7cd8bc9325c14b05c34ce60b22842d8a
MD5 3b8900fdf623aae67a8260ad7c11840a
SHA1 ea37a607e572f236117a7cd393bc3f73250692a7
SHA512 2db97d5910eeffe86997172c99c471a4f592a3c12ed34f47a17a1c5ec9af0ed0e19f9a794ef651ce85034b86ba29cb82a4204c0aa8ab66cf07d83b57210e0047
SSDEEP 1572864:8JkeyYglItcTlX5tS8JXOm2ZR532FWrRwdcYS/aEHBt6w5Hnflkg+rkVRJsZRw+C:RDBAV3xFPuT62zeZ
TLSH
T1F8B87D4AF4F38E6AD827857C42B7A731B938F41C53119B272398F7347A62B501B5BB18
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

advapi32

CryptAcquireContextW CryptCreateHash CryptDecrypt CryptDestroyHash CryptGenRandom CryptGetHashParam CryptGetProvParam CryptReleaseContext CryptSetHashParam CryptSetProvParam CryptSignHashA DeregisterEventSource GetSidSubAuthority GetSidSubAuthorityCount GetTokenInformation GetUserNameA GetUserNameW InitializeSecurityDescriptor OpenProcessToken RegCloseKey RegEnumKeyExW RegEnumValueA RegEnumValueW RegOpenKeyExA RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExA RegQueryValueExW RegisterEventSourceW ReportEventW SetSecurityDescriptorDacl SystemFunction036

avrt

AvRevertMmThreadCharacteristics AvSetMmThreadCharacteristicsW

bcrypt

BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider

cfgmgr32

CM_Get_Child CM_Get_DevNode_Registry_PropertyW CM_Get_DevNode_Status CM_Get_Device_IDW CM_Get_Device_ID_ListW CM_Get_Device_ID_List_SizeW CM_Get_Sibling CM_Locate_DevNodeW CM_Open_DevNode_Key

crypt32

CertCloseStore CertDeleteCertificateFromStore CertEnumCRLsInStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CertGetCertificateContextProperty CertOpenStore CertOpenSystemStoreW PFXImportCertStore

d2d1

D2D1CreateFactory

dwrite

DWriteCreateFactory

gdi32

BitBlt CombineRgn CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateFontIndirectW CreateRectRgn CreateSolidBrush DeleteDC DeleteObject EnumFontFamiliesW ExtCreateRegion ExtSelectClipRgn ExtTextOutW GdiFlush GetCharWidth32A GetClipBox GetClipRgn GetDIBColorTable GetDeviceCaps GetFontData GetFontUnicodeRanges GetGlyphIndicesW GetGlyphOutlineW GetGraphicsMode GetObjectA GetObjectW GetOutlineTextMetricsA GetStockObject GetTextFaceW GetTextMetricsA GetWorldTransform IntersectClipRect ModifyWorldTransform RestoreDC SaveDC SelectClipRgn SelectObject SetBkMode SetGraphicsMode SetMapMode SetTextAlign SetTextColor SetWorldTransform StretchDIBits

iphlpapi

GetAdaptersAddresses if_indextoname if_nametoindex

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AddVectoredExceptionHandler AllocConsole AreFileApisANSI AttachConsole CancelIoEx CloseHandle CloseThreadpoolWork ConvertFiberToThread ConvertThreadToFiberEx CreateConsoleScreenBuffer CreateDirectoryW CreateEventA CreateEventW CreateFiberEx CreateFileA CreateFileMappingA CreateFileW CreateHardLinkW CreateMutexA CreateProcessW CreateSemaphoreA CreateSemaphoreW CreateThread CreateThreadpoolWork CreateToolhelp32Snapshot DebugBreak DeleteCriticalSection DeleteFiber DeleteFileW DeviceIoControl DuplicateHandle EnterCriticalSection EnumResourceLanguagesA EnumSystemLocalesA ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileExW FindFirstFileW FindNextFileA FindNextFileW FormatMessageA FormatMessageW FreeConsole FreeEnvironmentStringsW FreeLibrary GetACP GetActiveProcessorCount GetCPInfo GetCommandLineW GetComputerNameA GetComputerNameW GetConsoleCursorInfo GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentConsoleFont GetCurrentDirectoryA GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDiskFreeSpaceExW GetDriveTypeA GetEnvironmentStringsW GetEnvironmentVariableA GetEnvironmentVariableW GetExitCodeProcess GetExitCodeThread GetFileAttributesA GetFileAttributesExA GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSize GetFileSizeEx GetFileType GetFinalPathNameByHandleA GetFullPathNameA GetFullPathNameW GetHandleInformation GetLastError GetLocaleInfoA GetLocaleInfoW GetLogicalDrives GetLongPathNameA GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetNumaHighestNodeNumber GetNumaNodeProcessorMaskEx GetNumberOfConsoleInputEvents GetProcAddress GetProcessAffinityMask GetProcessHeap GetProcessTimes GetShortPathNameW GetStdHandle GetSystemDirectoryA GetSystemDirectoryW GetSystemInfo GetSystemTime GetSystemTimeAdjustment GetSystemTimeAsFileTime GetTempFileNameW GetTempPathA GetTempPathW GetThreadContext GetThreadGroupAffinity GetThreadLocale GetThreadPriority GetThreadTimes GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLocaleName GetVersion GetVersionExA GetWindowsDirectoryA GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalHandle GlobalLock GlobalMemoryStatusEx GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSRWLock IsDBCSLeadByteEx IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage K32GetProcessMemoryInfo LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW LocalAlloc LocalFree MapViewOfFile Module32FirstW Module32NextW MoveFileExA MoveFileExW MulDiv MultiByteToWideChar OpenFileMappingA OpenProcess OutputDebugStringA PeekConsoleInputA PeekConsoleInputW PeekNamedPipe QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleA ReadConsoleInputA ReadConsoleInputW ReadConsoleW ReadFile RegisterWaitForSingleObject ReleaseMutex ReleaseSRWLockExclusive ReleaseSRWLockShared ReleaseSemaphore RemoveDirectoryW RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetConsoleActiveScreenBuffer SetConsoleCtrlHandler SetConsoleCursorInfo SetConsoleMode SetConsoleScreenBufferSize SetConsoleTextAttribute SetConsoleTitleA SetConsoleWindowInfo SetCurrentDirectoryA SetDllDirectoryA SetDllDirectoryW SetEnvironmentVariableW SetErrorMode SetEvent SetFilePointer SetHandleInformation SetLastError SetProcessAffinityMask SetSystemTime SetThreadAffinityMask SetThreadContext SetThreadErrorMode SetThreadGroupAffinity SetThreadInformation SetThreadPriority SetThreadStackGuarantee SetUnhandledExceptionFilter SignalObjectAndWait Sleep SleepConditionVariableCS SleepConditionVariableSRW SubmitThreadpoolWork SuspendThread SwitchToFiber SwitchToThread SystemTimeToFileTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive TryAcquireSRWLockShared TryEnterCriticalSection UnmapViewOfFile UnregisterWait VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualLock VirtualProtect VirtualQuery VirtualUnlock WaitForMultipleObjects WaitForMultipleObjectsEx WaitForSingleObject WaitForSingleObjectEx WaitForThreadpoolWorkCallbacks WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleOutputW WriteConsoleW WriteFile __C_specific_handler lstrcmpiW lstrcpyA lstrcpynA

msimg32

AlphaBlend

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-convert-l1-1-0

_ui64toa_s atof atoi mbrtowc mbsrtowcs mbstowcs strtol strtoll strtoul strtoull strtoumax wcrtomb wcstol wcstombs wcstombs_s wcstoul wctomb

api-ms-win-crt-environment-l1-1-0

__p__environ _putenv _putenv_s _wgetcwd _wgetenv _wputenv getenv getenv_s

api-ms-win-crt-filesystem-l1-1-0

_access _chmod _findclose _findfirst64i32 _findnext64i32 _fstat64 _fstat64 _fstat64i32 _fstat64i32 _getdrive _lock_file _mkdir _rmdir _rmdir _mkdir _stat64 _stat64 _stat64i32 _stat64i32 _unlink _unlock_file _waccess _wchdir _unlink _wchmod _wfindfirst64i32 _wfindnext64i32 _wfullpath _wmkdir _wremove _wrename _wrmdir _wstat64 _wstat64i32 _wunlink remove rename

api-ms-win-crt-heap-l1-1-0

_aligned_free _aligned_malloc _aligned_realloc _set_new_mode calloc free malloc realloc

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func _configthreadlocale _create_locale _free_locale localeconv setlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr _fdopen _fdopen _hypot _j1 acos acosf acosh asin asinf asinh asinhf atan atan2 atan2f atanf atanh cbrt cbrtf ceil ceilf cos cosf cosh erf erff exp exp2 exp2f expf expm1 expm1f fabs floor floorf fma fmaf fmax fmaxf fmin fminf fmod fmodf frexp hypot llrint llround llroundf log log10 log10f log1p log1pf log2 log2f logf lrint lrintf lround lroundf modf modff nextafter pow powf remainder rint round roundf sin sinf sinh sinhf sqrt sqrtf tan tanf tanh tanhf trunc truncf

api-ms-win-crt-multibyte-l1-1-0

_mbsrchr

api-ms-win-crt-private-l1-1-0

__intrinsic_setjmp longjmp memchr memcmp memcpy memmove strchr strrchr strstr wcschr wcsrchr wcsstr

api-ms-win-crt-process-l1-1-0

_wspawnv _wspawnve _wspawnvp _wspawnvpe

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _assert _beginthreadex _cexit _configure_narrow_argv _crt_atexit _endthreadex _errno _exit _get_errno _initialize_narrow_environment _getpid _set_app_type _initterm _initterm_e _register_thread_local_exe_atexit_callback _set_abort_behavior _set_errno _set_invalid_parameter_handler _wassert abort exit perror raise signal strerror strerror_s

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf __stdio_common_vsnprintf_s __stdio_common_vsnwprintf_s __stdio_common_vsprintf __stdio_common_vsprintf_s __stdio_common_vswprintf _chsize _chsize_s _close _close _commit _dup _dup2 _dup2 _fflush_nolock _fileno _fileno _fseeki64 _fseeki64 _ftelli64 _ftelli64 _get_osfhandle _getmaxstdio _isatty _kbhit _kbhit _isatty _locking _lseeki64 _lseeki64 _open _open _open_osfhandle _pipe _read _setmaxstdio _setmode _setmode _sopen _wcreat _wfopen _wfreopen _wopen _write _write _wsopen clearerr fclose feof ferror fflush fgetc fgets fopen fopen_s fputc fputs fputwc fread freopen fseek ftell fwrite getc getchar getwc putc putchar puts putwc rewind setvbuf ungetc ungetwc

api-ms-win-crt-string-l1-1-0

_strdup _stricmp _strdup _stricmp _strnicmp _strnicmp _wcsdup _wcsdup _wcsicmp _wcsnicmp isalnum isalpha isblank isdigit islower isprint ispunct isspace isupper iswctype isxdigit mbrlen memset strcat strcmp strcoll strcpy strcpy_s strcspn strlen strncat strncat_s strncmp strncpy strncpy_s strnlen strpbrk strspn strtok strtok_s strxfrm tolower toupper towlower towupper wcscat wcscat_s wcscmp wcscoll wcscpy wcscpy_s wcslen wcsncmp wcsncpy wcsnlen wcsspn wcsxfrm wctype

api-ms-win-crt-time-l1-1-0

_difftime64 _ftime64 _ftime64_s _gmtime64 _gmtime64_s _localtime64 _localtime64_s _mktime64 _time32 _time64 _wutime64 clock strftime wcsftime

api-ms-win-crt-utility-l1-1-0

bsearch div qsort rand rand_s srand

ncrypt

NCryptDecrypt NCryptDeleteKey NCryptFreeObject NCryptGetProperty NCryptOpenKey NCryptOpenStorageProvider NCryptSignHash

ntdll

NtWriteFile RtlNtStatusToDosError

ole32

CLSIDFromString CoCreateInstance CoGetMalloc CoInitialize CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoUninitialize CreateBindCtx OleLoadFromStream OleSaveToStream PropVariantClear StringFromCLSID StringFromGUID2

oleaut32

OleCreatePropertyFrame

shell32

CommandLineToArgvW SHGetFolderPathA SHGetFolderPathW SHGetKnownFolderPath SHGetSpecialFolderPathA

shlwapi

PathRemoveFileSpecW SHCreateStreamOnFileA

user32

AdjustWindowRectEx BeginPaint CopyIcon CreateWindowExA DefWindowProcA DestroyCursor DestroyWindow DispatchMessageA DrawIcon EndPaint EnumDisplayMonitors EnumWindows FillRect FindWindowW FrameRect GetClassNameW GetClientRect GetCursorInfo GetDC GetDesktopWindow GetForegroundWindow GetIconInfo GetMessageA GetProcessWindowStation GetSystemMetrics GetUserObjectInformationW GetWindowLongPtrA GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InflateRect IntersectRect IsIconic IsWindow IsWindowVisible LoadCursorA MapWindowPoints MessageBoxW MonitorFromWindow MsgWaitForMultipleObjectsEx PeekMessageA PeekMessageW PostMessageW PostThreadMessageA ReleaseDC SendMessageA SetLayeredWindowAttributes SetWindowLongPtrA SetWindowRgn ShowWindow SystemParametersInfoA TranslateMessage wsprintfA

avicap32

capCreateCaptureWindowA capGetDriverDescriptionA

winmm

mciGetErrorStringA mciSendCommandA waveInAddBuffer waveInClose waveInGetDevCapsW waveInGetNumDevs waveInOpen waveInPrepareHeader waveInReset waveInStart waveInStop waveInUnprepareHeader waveOutClose waveOutGetDevCapsW waveOutGetNumDevs waveOutOpen waveOutPrepareHeader waveOutUnprepareHeader waveOutWrite

ws2_32

WSACleanup WSACloseEvent WSACreateEvent WSADuplicateSocketW WSAEnumNetworkEvents WSAEventSelect WSAGetLastError WSAGetOverlappedResult WSAIoctl WSARecvFrom WSAResetEvent WSASendMsg WSASendTo WSASetEvent WSASetLastError WSASocketA WSASocketW WSAStartup WSAStringToAddressA WSAWaitForMultipleEvents __WSAFDIsSet accept bind closesocket connect freeaddrinfo getaddrinfo gethostbyaddr gethostbyname gethostname getnameinfo getpeername getservbyname getservbyport getsockname getsockopt htonl htons inet_addr inet_ntoa inet_ntop inet_pton ioctlsocket listen ntohl ntohs recv recvfrom select send sendto setsockopt shutdown socket

_pixman_internal_only_get_implementation cJSON_AddArrayToObject cJSON_AddBoolToObject cJSON_AddFalseToObject cJSON_AddItemReferenceToArray cJSON_AddItemReferenceToObject cJSON_AddItemToArray cJSON_AddItemToObject cJSON_AddItemToObjectCS cJSON_AddNullToObject cJSON_AddNumberToObject cJSON_AddObjectToObject cJSON_AddRawToObject cJSON_AddStringToObject cJSON_AddTrueToObject cJSON_Compare cJSON_CreateArray cJSON_CreateArrayReference cJSON_CreateBool cJSON_CreateDoubleArray cJSON_CreateFalse cJSON_CreateFloatArray cJSON_CreateIntArray cJSON_CreateNull cJSON_CreateNumber cJSON_CreateObject cJSON_CreateObjectReference cJSON_CreateRaw cJSON_CreateString cJSON_CreateStringArray cJSON_CreateStringReference cJSON_CreateTrue cJSON_Delete cJSON_DeleteItemFromArray cJSON_DeleteItemFromObject cJSON_DeleteItemFromObjectCaseSensitive cJSON_DetachItemFromArray cJSON_DetachItemFromObject cJSON_DetachItemFromObjectCaseSensitive cJSON_DetachItemViaPointer cJSON_Duplicate cJSON_GetArrayItem cJSON_GetArraySize cJSON_GetErrorPtr cJSON_GetNumberValue cJSON_GetObjectItem cJSON_GetObjectItemCaseSensitive cJSON_GetStringValue cJSON_HasObjectItem cJSON_InitHooks cJSON_InsertItemInArray cJSON_IsArray cJSON_IsBool cJSON_IsFalse cJSON_IsInvalid cJSON_IsNull cJSON_IsNumber cJSON_IsObject cJSON_IsRaw cJSON_IsString cJSON_IsTrue cJSON_Minify cJSON_Parse cJSON_ParseWithLength cJSON_ParseWithLengthOpts cJSON_ParseWithOpts cJSON_Print cJSON_PrintBuffered cJSON_PrintPreallocated cJSON_PrintUnformatted cJSON_ReplaceItemInArray cJSON_ReplaceItemInObject cJSON_ReplaceItemInObjectCaseSensitive cJSON_ReplaceItemViaPointer cJSON_SetNumberHelper cJSON_SetValuestring cJSON_Version cJSON_free cJSON_malloc cairo_dwrite_font_face_create_for_dwrite_fontface cairo_dwrite_font_face_get_measuring_mode cairo_dwrite_font_face_get_rendering_params cairo_dwrite_font_face_set_measuring_mode cairo_dwrite_font_face_set_rendering_params flite_lang_list flite_lang_list_length flite_voice_list lc3_decode lc3_decoder_size lc3_delay_samples lc3_encode lc3_encoder_disable_ltpf lc3_encoder_size lc3_frame_block_bytes lc3_frame_bytes lc3_frame_samples lc3_hr_decoder_size lc3_hr_delay_samples lc3_hr_encoder_size lc3_hr_frame_block_bytes lc3_hr_frame_bytes lc3_hr_frame_samples lc3_hr_resolve_bitrate lc3_hr_setup_decoder lc3_hr_setup_encoder lc3_resolve_bitrate lc3_setup_decoder lc3_setup_encoder pixman_add_trapezoids pixman_add_traps pixman_add_triangles pixman_blt pixman_composite_glyphs pixman_composite_glyphs_no_mask pixman_composite_trapezoids pixman_composite_triangles pixman_compute_composite_region pixman_disable_out_of_bounds_workaround pixman_edge_init pixman_edge_step pixman_f_transform_bounds pixman_f_transform_from_pixman_transform pixman_f_transform_init_identity pixman_f_transform_init_rotate pixman_f_transform_init_scale pixman_f_transform_init_translate pixman_f_transform_invert pixman_f_transform_multiply pixman_f_transform_point pixman_f_transform_point_3d pixman_f_transform_rotate pixman_f_transform_scale pixman_f_transform_translate pixman_fill pixman_format_supported_destination pixman_format_supported_source pixman_glyph_cache_create pixman_glyph_cache_destroy pixman_glyph_cache_freeze pixman_glyph_cache_insert pixman_glyph_cache_lookup pixman_glyph_cache_remove pixman_glyph_cache_thaw pixman_glyph_get_extents pixman_glyph_get_mask_format pixman_image_composite pixman_image_composite32 pixman_image_composite64f pixman_image_create_bits pixman_image_create_bits_no_clear pixman_image_create_conical_gradient pixman_image_create_linear_gradient pixman_image_create_radial_gradient pixman_image_create_solid_fill pixman_image_fill_boxes pixman_image_fill_rectangles pixman_image_get_component_alpha pixman_image_get_data pixman_image_get_depth pixman_image_get_destroy_data pixman_image_get_format pixman_image_get_height pixman_image_get_stride pixman_image_get_width pixman_image_ref pixman_image_set_accessors pixman_image_set_alpha_map pixman_image_set_clip_region pixman_image_set_clip_region32 pixman_image_set_clip_region64f pixman_image_set_component_alpha pixman_image_set_destroy_function pixman_image_set_dither pixman_image_set_dither_offset pixman_image_set_filter pixman_image_set_has_client_clip pixman_image_set_indexed pixman_image_set_repeat pixman_image_set_source_clipping pixman_image_set_transform pixman_image_unref pixman_line_fixed_edge_init pixman_rasterize_edges pixman_rasterize_trapezoid pixman_region32_clear pixman_region32_contains_point pixman_region32_contains_pointf pixman_region32_contains_rectangle pixman_region32_copy pixman_region32_empty pixman_region32_equal pixman_region32_extents pixman_region32_fini pixman_region32_init pixman_region32_init_from_image pixman_region32_init_rect pixman_region32_init_rectf pixman_region32_init_rects pixman_region32_init_with_extents pixman_region32_intersect pixman_region32_intersect_rect pixman_region32_intersect_rectf pixman_region32_inverse pixman_region32_n_rects pixman_region32_not_empty pixman_region32_rectangles pixman_region32_reset pixman_region32_selfcheck pixman_region32_subtract pixman_region32_translate pixman_region32_translatef pixman_region32_union pixman_region32_union_rect pixman_region32_union_rectf pixman_region64f_clear pixman_region64f_contains_point pixman_region64f_contains_pointf pixman_region64f_contains_rectangle pixman_region64f_copy pixman_region64f_empty pixman_region64f_equal pixman_region64f_extents pixman_region64f_fini pixman_region64f_init pixman_region64f_init_from_image pixman_region64f_init_rect pixman_region64f_init_rectf pixman_region64f_init_rects pixman_region64f_init_with_extents pixman_region64f_intersect pixman_region64f_intersect_rect pixman_region64f_intersect_rectf pixman_region64f_inverse pixman_region64f_n_rects pixman_region64f_not_empty pixman_region64f_rectangles pixman_region64f_reset pixman_region64f_selfcheck pixman_region64f_subtract pixman_region64f_translate pixman_region64f_translatef pixman_region64f_union pixman_region64f_union_rect pixman_region64f_union_rectf pixman_region_clear pixman_region_contains_point pixman_region_contains_pointf pixman_region_contains_rectangle pixman_region_copy pixman_region_empty pixman_region_equal pixman_region_extents pixman_region_fini pixman_region_init pixman_region_init_from_image pixman_region_init_rect pixman_region_init_rectf pixman_region_init_rects pixman_region_init_with_extents pixman_region_intersect pixman_region_intersect_rect pixman_region_intersect_rectf pixman_region_inverse pixman_region_n_rects pixman_region_not_empty pixman_region_rectangles pixman_region_reset pixman_region_selfcheck pixman_region_set_static_pointers pixman_region_subtract pixman_region_translate pixman_region_translatef pixman_region_union pixman_region_union_rect pixman_region_union_rectf pixman_sample_ceil_y pixman_sample_floor_y pixman_transform_bounds pixman_transform_from_pixman_f_transform pixman_transform_init_identity pixman_transform_init_rotate pixman_transform_init_scale pixman_transform_init_translate pixman_transform_invert pixman_transform_is_identity pixman_transform_is_int_translate pixman_transform_is_inverse pixman_transform_is_scale pixman_transform_multiply pixman_transform_point pixman_transform_point_31_16 pixman_transform_point_31_16_3d pixman_transform_point_31_16_affine pixman_transform_point_3d pixman_transform_rotate pixman_transform_scale pixman_transform_translate pixman_version pixman_version_string

Name

.text

Size

122.0MB

Virtual Size

122.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

202KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

83.8MB

Virtual Size

83.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

14.8MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

671KB

Virtual Size

671KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/ffmpeg/bin/ffprobe.exe

IMPHASH bae079222e42ef332347f7ac65e6b6b0
SHA256 afe05347caaabe479b3c4eae71992b6ec1e11c57266a1d665deb0f9fe9847208
MD5 f6c6879ac508d6ab0e8c99522f3b847d
SHA1 f5472a6af8c251c9fb639c26305b767c44ce1c79
SHA512 bd1ac848a40333b6d30d30d1cf65168b1fea683b2e89b4665ec76bc4baec7df06a98f91f95197f77cc721afd09f9229c0e90f06e0842e58767bb53c1a23f9615
SSDEEP 1572864:ozwnBVt3eF1fWB2yIzUjXEEv4nGvOn1iwdcYS/aEHBt6w5Hnflkg+rkVRJsZRw+q:6BpZGLFuuT623ek
TLSH
T1ABB87D0AF4F38E6AD827857C42B7A731B938F41C53119B272398F7347A62B505B5BB18
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

advapi32

avrt

AvRevertMmThreadCharacteristics AvSetMmThreadCharacteristicsW

bcrypt

BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider

cfgmgr32

CM_Get_Child CM_Get_DevNode_Registry_PropertyW CM_Get_DevNode_Status CM_Get_Device_IDW CM_Get_Device_ID_ListW CM_Get_Device_ID_List_SizeW CM_Get_Sibling CM_Locate_DevNodeW CM_Open_DevNode_Key

crypt32

d2d1

D2D1CreateFactory

dwrite

DWriteCreateFactory

gdi32

iphlpapi

GetAdaptersAddresses if_indextoname if_nametoindex

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AddVectoredExceptionHandler AllocConsole AreFileApisANSI AttachConsole CancelIoEx CloseHandle CloseThreadpoolWork ConvertFiberToThread ConvertThreadToFiberEx CreateConsoleScreenBuffer CreateDirectoryW CreateEventA CreateEventW CreateFiberEx CreateFileA CreateFileMappingA CreateFileW CreateHardLinkW CreateMutexA CreateProcessW CreateSemaphoreA CreateSemaphoreW CreateThread CreateThreadpoolWork CreateToolhelp32Snapshot DebugBreak DeleteCriticalSection DeleteFiber DeleteFileW DeviceIoControl DuplicateHandle EnterCriticalSection EnumResourceLanguagesA EnumSystemLocalesA ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileExW FindFirstFileW FindNextFileA FindNextFileW FormatMessageA FormatMessageW FreeConsole FreeEnvironmentStringsW FreeLibrary GetACP GetActiveProcessorCount GetCPInfo GetCommandLineW GetComputerNameA GetComputerNameW GetConsoleCursorInfo GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentConsoleFont GetCurrentDirectoryA GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDiskFreeSpaceExW GetDriveTypeA GetEnvironmentStringsW GetEnvironmentVariableA GetEnvironmentVariableW GetExitCodeProcess GetExitCodeThread GetFileAttributesA GetFileAttributesExA GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSize GetFileSizeEx GetFileType GetFinalPathNameByHandleA GetFullPathNameA GetFullPathNameW GetHandleInformation GetLastError GetLocaleInfoA GetLocaleInfoW GetLogicalDrives GetLongPathNameA GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetNumaHighestNodeNumber GetNumaNodeProcessorMaskEx GetNumberOfConsoleInputEvents GetProcAddress GetProcessAffinityMask GetProcessHeap GetProcessTimes GetShortPathNameW GetStdHandle GetSystemDirectoryA GetSystemDirectoryW GetSystemInfo GetSystemTime GetSystemTimeAdjustment GetSystemTimeAsFileTime GetTempFileNameW GetTempPathA GetTempPathW GetThreadContext GetThreadGroupAffinity GetThreadLocale GetThreadPriority GetThreadTimes GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLocaleName GetVersion GetVersionExA GetWindowsDirectoryA GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalHandle GlobalLock GlobalMemoryStatusEx GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSRWLock IsDBCSLeadByteEx IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW LocalAlloc LocalFree MapViewOfFile Module32FirstW Module32NextW MoveFileExA MoveFileExW MulDiv MultiByteToWideChar OpenFileMappingA OpenProcess OutputDebugStringA PeekConsoleInputA PeekConsoleInputW PeekNamedPipe QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleA ReadConsoleInputA ReadConsoleInputW ReadConsoleW ReadFile RegisterWaitForSingleObject ReleaseMutex ReleaseSRWLockExclusive ReleaseSRWLockShared ReleaseSemaphore RemoveDirectoryW RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetConsoleActiveScreenBuffer SetConsoleCursorInfo SetConsoleMode SetConsoleScreenBufferSize SetConsoleTextAttribute SetConsoleTitleA SetConsoleWindowInfo SetCurrentDirectoryA SetDllDirectoryA SetDllDirectoryW SetEnvironmentVariableW SetErrorMode SetEvent SetFilePointer SetHandleInformation SetLastError SetProcessAffinityMask SetSystemTime SetThreadAffinityMask SetThreadContext SetThreadErrorMode SetThreadGroupAffinity SetThreadInformation SetThreadPriority SetThreadStackGuarantee SetUnhandledExceptionFilter SignalObjectAndWait Sleep SleepConditionVariableCS SleepConditionVariableSRW SubmitThreadpoolWork SuspendThread SwitchToFiber SwitchToThread SystemTimeToFileTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive TryAcquireSRWLockShared TryEnterCriticalSection UnmapViewOfFile UnregisterWait VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualLock VirtualProtect VirtualQuery VirtualUnlock WaitForMultipleObjects WaitForMultipleObjectsEx WaitForSingleObject WaitForSingleObjectEx WaitForThreadpoolWorkCallbacks WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleOutputW WriteConsoleW WriteFile __C_specific_handler lstrcmpiW lstrcpyA lstrcpynA

msimg32

AlphaBlend

api-ms-win-crt-convert-l1-1-0

_ui64toa_s atof atoi mbrtowc mbsrtowcs mbstowcs strtol strtoll strtoul strtoull strtoumax wcrtomb wcstol wcstombs wcstombs_s wcstoul wctomb

api-ms-win-crt-environment-l1-1-0

__p__environ _putenv _putenv_s _wgetcwd _wgetenv _wputenv getenv getenv_s

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

_aligned_free _aligned_malloc _aligned_realloc _set_new_mode calloc free malloc realloc

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func _configthreadlocale _create_locale _free_locale localeconv setlocale

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

_mbsrchr

api-ms-win-crt-private-l1-1-0

__intrinsic_setjmp longjmp memchr memcmp memcpy memmove strchr strrchr strstr wcschr wcsrchr wcsstr

api-ms-win-crt-process-l1-1-0

_wspawnv _wspawnve _wspawnvp _wspawnvpe

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf __stdio_common_vsnprintf_s __stdio_common_vsnwprintf_s __stdio_common_vsprintf __stdio_common_vsprintf_s __stdio_common_vswprintf _chsize _chsize_s _close _close _commit _dup _dup2 _dup2 _fflush_nolock _fileno _fileno _fseeki64 _fseeki64 _ftelli64 _ftelli64 _get_osfhandle _getmaxstdio _isatty _kbhit _isatty _locking _lseeki64 _lseeki64 _open _open _open_osfhandle _pipe _read _setmaxstdio _setmode _setmode _sopen _wcreat _wfopen _wfreopen _wopen _write _write _wsopen clearerr fclose feof ferror fflush fgetc fgets fopen fopen_s fputc fputs fputwc fread freopen fseek ftell fwrite getc getchar getwc putc putchar puts putwc rewind setvbuf ungetc ungetwc

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

_difftime64 _ftime64 _ftime64_s _gmtime64 _gmtime64_s _localtime64 _localtime64_s _mktime64 _time32 _time64 _wutime64 clock strftime wcsftime

api-ms-win-crt-utility-l1-1-0

bsearch div qsort rand rand_s srand

ncrypt

NCryptDecrypt NCryptDeleteKey NCryptFreeObject NCryptGetProperty NCryptOpenKey NCryptOpenStorageProvider NCryptSignHash

ntdll

NtWriteFile RtlNtStatusToDosError

ole32

oleaut32

OleCreatePropertyFrame

shell32

CommandLineToArgvW SHGetFolderPathA SHGetFolderPathW SHGetKnownFolderPath SHGetSpecialFolderPathA

shlwapi

PathRemoveFileSpecW SHCreateStreamOnFileA

user32

avicap32

capCreateCaptureWindowA capGetDriverDescriptionA

winmm

ws2_32

Name

.text

Size

121.9MB

Virtual Size

121.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

202KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

83.7MB

Virtual Size

83.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

14.8MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

670KB

Virtual Size

670KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

pmv_testdateien.zip

pmv_testdateien/ANLEITUNG.txt

pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/Auto PMV Maker.exe

user32

comctl32

kernel32

advapi32

gdi32

generic

auto_pmv_maker.pyc

pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/README.txt

pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/ffmpeg/bin/ffmpeg.exe

api-ms-win-core-synch-l1-2-0

advapi32

avrt

bcrypt

cfgmgr32

crypt32

d2d1

dwrite

gdi32

iphlpapi

kernel32

msimg32

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-process-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

ncrypt

ntdll

ole32

oleaut32

shell32

shlwapi

user32

avicap32

winmm

ws2_32

generic

pmv_testdateien/Auto_PMV_Maker_v0.6_Windows/ffmpeg/bin/ffprobe.exe

api-ms-win-core-synch-l1-2-0

advapi32

avrt

bcrypt

cfgmgr32

crypt32

d2d1

dwrite

gdi32

iphlpapi

kernel32

msimg32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-process-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0