File: 232397ec9080c7eee67fba81e1669c15

Metadata
File name:N/A
File type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
File size:344453
Analysis date:N/A
MD5:232397ec9080c7eee67fba81e1669c15
SHA1:46abb96c0b4515186a07f637258c89bd2df33218
SHA256:95037c57967cabef80097b2659d72c5da496ea6ab2a34b2e1180ce2e113d5135
SHA512:N/A
SSDEEP:N/A
IMPHASH:N/A
Authentihash:N/A
Related resources
PE TypePE32
Internal NameQuickTime Plug-In
File Size336 kB
Machine TypeIntel 386 or later, and compatibles
File OSWin32
Code Size69632
OS Version4.0
Entry Point0x25000
File Flags Mask0x003f
Linker Version8.0
File SubtypeN/A
Uninitialized Data SizeN/A
File Version7.6 (1292)
Initialized Data Size69632
Product Version Number7.60.92.0
File Extentssdp|sdp|rtsp,rts|mov,qt,mqv|flc,fli,cel|wav,bwf|wav,bwf
Product NameQuickTime Plug-in 7.6
Company NameApple Inc.
MIME Typeapplication/sdp|application/x-sdp|application/x-rtsp|video/quicktime|video/flc|audio/x-wav|audio/wav
Character SetWindows, Latin1
Language CodeEnglish (U.S.)
File Version Number7.6.0.0
File TypeWin32 DLL
File Open NameN/A
Legal CopyrightCopyright Apple Inc. 1989-2008
SubsystemWindows GUI
Streamdescriptorsdp SD Pstreamdescriptorsdp RTS Pstreamdescriptorrtsprts Quick Time Moviemovqtmqv Auto Desk Animator FL Cflcflicel WAV Eaudiowavbwf WAV EaudiowavbwfN/A
Original Filenamenpqtplugin.dll
Object File TypeDynamic link library
Image Version0.0
File Flags(none)
Subsystem Version4.0
Product VersionQuickTime 7.6 (1292)
Source:
APTNotes
Cyber threat intelligence reports associated with 232397ec9080c7eee67fba81e1669c15.
Loading...
Domains
Domains the malware sample communicates with.
Hosts
Hosts the malware sample communicates with.
HTTP Requests
HTTP requests the malware sample makes.
AV Detections
AV detection names associated with the malware sample.
AVGWin32/Zbot.F
AgnitumWin32.Nimnul.Gen.2
AhnLab-V3Win32/Ramnit.G
AntiVirW32/Ramnit.C
AvastWin32:RmnDrp
BitDefenderWin32.Ramnit.N
CAT-QuickHealW32.Ramnit.A
ClamAVW32.Ramnit-1
CommtouchW32/Ramnit.E
ComodoVirus.Win32.Ramnit.K
DrWebWin32.Rmnet.12
ESET-NOD32Win32/Ramnit.H
EmsisoftWin32.Ramnit.N (B)
F-ProtW32/Ramnit.E
F-SecureWin32.Ramnit.N
FortinetW32/Ramnit.C
GDataWin32.Ramnit.N
IkarusVirus.Win32.Ramnit
JiangminWin32/IRCNite.wi
K7AntiVirusVirus
KasperskyVirus.Win32.Nimnul.a
KingsoftWin32.Ramnit.lx.30720
MalwarebytesVirus.Ramnit
McAfeeW32/Ramnit.a
MicrosoftVirus:Win32/Ramnit.J
NANO-AntivirusVirus.Win32.Nimnul.bmnup
NormanW32/Ramnit.AS
PCToolsMalware.Ramnit
PandaW32/Cosmu.E
RisingWin32.Ramnit.b
SophosW32/Ramnit-A
SymantecW32.Ramnit.B!inf
TotalDefenseWin32/Ramnit.C
TrendMicroPE_RAMNIT.DEN
TrendMicro-HouseCallPE_RAMNIT.DEN
VBA32Virus.Win32.Nimnul.b
VIPREVirus.Win32.Ramnit.b (v)
ViRobotWin32.Nimnul.A
eSafeWin32.Ramnit.C
nProtectVirus/W32.SpyEye
Mutants
Mutants created by the malware sample.
Registry keys
Registry keys created by the malware sample.
Comments
User comments about 232397ec9080c7eee67fba81e1669c15.
NOTICE: We have updated our privacy terms and conditions in accordance to GDPR. By using our site, you acknowledge that you have read and understand our Privacy Policy. Your use of ThreatMiner’s Products and Services is subject to these policies and terms.