obs-asio[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

obs-asio.dll
Size

927KB
MD5

a6b436f1e18143317be42ab6c08ad01b
SHA1

cf55318675a5f1a6ffb72cf3129fef0ba6d11a8f
SHA256

179efa03c5cbcdb6a64398b7794b4e7b6e275cedea1640c01c352ed0c401bbf6
SHA512

662710a25d5da0530843dbff1e717007cc894f135385a61ec60bdccef475d6e82fbedb864663697151d461ff6d7cea9bf57d672a93edb4ce6741b15d92551c6e
SSDEEP

12288:scWIwG6Oc+iT2Lfo4n7j4iJ7ExrVRcIcQHf3Wxzq5z8sIs:stj+iT2c4n7j41TRcIcQHf3Wxzq5zrI

Score

N/A

Malware Config

Signatures

Files

obs-asio.dll
.dll windows x64

Password: should_not_be_infected

c1996a421f5d0958544a805c8c991947

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

obs-frontend-api

obs_frontend_get_main_window

obs

obs_properties_get
obs_register_source_s
obs_property_set_long_description
obs_properties_add_list
obs_get_audio_info
obs_module_load_locale
obs_source_output_audio
obs_property_list_add_int
obs_properties_add_button
obs_property_list_item_string
obs_properties_add_button2
obs_property_set_modified_callback
obs_property_list_item_count
blog
bfree
bmemdup
os_gettime_ns
text_lookup_destroy
text_lookup_getstr
obs_property_list_add_string
obs_data_set_default_int
obs_data_get_string
obs_data_get_int
obs_properties_create
obs_property_set_modified_callback2
obs_property_list_item_disable
obs_property_list_clear
obs_property_list_insert_string
obs_property_set_visible

qt6widgets

?setIconPixmap@QMessageBox@@QEAAXAEBVQPixmap@@@Z
?setText@QMessageBox@@QEAAXAEBVQString@@@Z
??1QMessageBox@@UEAA@XZ
??0QMessageBox@@QEAA@PEAVQWidget@@@Z
?exec@QDialog@@UEAAHXZ
?setWindowTitle@QMessageBox@@QEAAXAEBVQString@@@Z

qt6gui

??0QPixmap@@QEAA@AEBVQString@@PEBDV?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
??1QPixmap@@UEAA@XZ

qt6core

??1QString@@QEAA@XZ
??0QString@@QEAA@PEBD@Z

kernel32

IsDebuggerPresent
OutputDebugStringW
CloseHandle
SetUnhandledExceptionFilter
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
TerminateThread
GetModuleHandleA
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
SetThreadAffinityMask
InitializeCriticalSectionEx
ResetEvent
MultiByteToWideChar
GetCurrentProcessId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
EnterCriticalSection

user32

AttachThreadInput
GetWindowThreadProcessId
PostMessageW
DestroyWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
DefWindowProcW

ole32

CoInitialize
CLSIDFromString
OleInitialize
OleUninitialize
CoCreateInstance

advapi32

RegOpenKeyW
RegEnumKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_current_owns
_Mtx_lock
_Mtx_unlock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_timedwait

winmm

timeBeginPeriod
timeGetTime

vcruntime140

memmove
memcmp
_purecall
memset
__C_specific_handler
__current_exception
__current_exception_context
__std_type_info_destroy_list
__std_terminate
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_execute_onexit_table
_crt_atexit
exit
_beginthreadex
_endthreadex
_cexit
_initterm_e
_initialize_narrow_environment
terminate
_seh_filter_dll
_configure_narrow_argv
_initterm
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table

api-ms-win-crt-heap-l1-1-0

free
calloc
realloc
_callnewh
malloc

api-ms-win-crt-string-l1-1-0

iswspace
towupper

api-ms-win-crt-time-l1-1-0

_ftime64_s

api-ms-win-crt-math-l1-1-0

sinf
cosf
expf
sqrtf
floorf
floor
atanf
ceilf

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

obs_module_free_locale
obs_module_get_string
obs_module_load
obs_module_set_locale
obs_module_set_pointer
obs_module_unload
obs_module_ver

Sections

.text
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 689KB - Virtual size: 688KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: should_not_be_infected

c1996a421f5d0958544a805c8c991947

Headers

DLL Characteristics

File Characteristics

Imports

obs-frontend-api

obs

qt6widgets

qt6gui

qt6core

kernel32

user32

ole32

advapi32

msvcp140

winmm

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

Exports

Exports

Sections

.text Size: 199KB - Virtual size: 198KB

.rdata Size: 689KB - Virtual size: 688KB

.data Size: 14KB - Virtual size: 21KB

.pdata Size: 9KB - Virtual size: 8KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 13KB - Virtual size: 13KB

.text
Size: 199KB - Virtual size: 198KB

.rdata
Size: 689KB - Virtual size: 688KB

.data
Size: 14KB - Virtual size: 21KB

.pdata
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 13KB - Virtual size: 13KB