[Bug 37882] user32.GetKeyboardLayoutNameW can't handle NULL out parameter, causing crash in custom application

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=37882

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|                            |https://web.archive.org/web
                   |                            |/20190123235439/https://www
                   |                            |.grc.com/malware/CryptoLock
                   |                            |er_02-10-2014.zip
           Keywords|                            |download, obfuscation

--- Comment #5 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

adding stable download link via Internet Archive for Documentation.

https://web.archive.org/web/20190123235439/https://www.grc.com/malware/CryptoLocker_02-10-2014.zip

https://www.virustotal.com/gui/file/725f2d25f00164d83419a548d174cf7eb6359931b18fdf74e57c02172ff33ba9

$ sha1sum CryptoLocker_02-10-2014.zip 
1f2a795cdb69c71acb3330d04ab09d7273f575b3  CryptoLocker_02-10-2014.zip

$ du -sh CryptoLocker_02-10-2014.zip 
308K    CryptoLocker_02-10-2014.zip

--- snip ---
$ 7z l CryptoLocker_02-10-2014.zip 

Listing archive: CryptoLocker_02-10-2014.zip

--
Path = CryptoLocker_02-10-2014.zip
Type = zip
Physical Size = 313930
Comment =                  THiS SAMPLE WAS DOWNLOADED FROM KERNELMODE.iNFO
                           ARCHiVE PASSWORD: infected

  Û ÜÛ ÜÛÛÛ ÛÛÛ  ÛÜ  Û ÜÛÛÛ Û   ÛÜ   ÜÛ ÜÛÛÛÜ ÛÛÛ   ÜÛÛÛ    Û Û   Û ÛÛÛÛ ÜÛÛÛÜ
  ÛÜÛ  Û    Û  Û ÛßÛ Û Û    Û   ÛßÛ ÛßÛ Û   Û Û  Û  Û         ÛÛ  Û Û    Û   Û
  ÛÛ   ÛÛÛÛ ÛÛÛß Û Û Û ÛÛÛÛ Û   Û ßÜß Û Û   Û Û   Û ÛÛÛÛ    Û Û Û Û ÛÛÛÛ Û   Û
  ÛßÛ  Û    ÛßÜ  Û ÛÜÛ Û    Û   Û  ß  Û Û   Û Û  Ûß Û    ÜÜ Û Û  ÛÛ Û    Û   Û
  Û ßÛ ßÛÛÛ Û ßÛ Û  ßÛ ßÛÛÛ ÛÛÛ Û     Û ßÛÛÛß ÛÛÛß  ßÛÛÛ ÛÛ Û Û   Û Û    ßÛÛÛß
MD5: 44217c15f30538a1fbdf614c9785c9b7                                   
Xylitol
ADDiTiONAL NOTE:
Cryptolocker


   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2014-02-10 15:03:33 ....A       395776       311983 
44217C15F30538A1FBDF614C9785C9B7.exe
------------------- ----- ------------ ------------  ------------------------
2014-02-10 15:03:33             395776       311983  1 files
--- snip ---

https://www.virustotal.com/gui/file/62f199dedfffef4eb71c33bdf22f4a9b3276f8a831999788059163fae43db48e

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.