gst_plugin_desc
Static task
static1
Behavioral task
behavioral1
Sample
0294991cc26b555aecd36c44185ba55f5ac9e7db01f050b3133e63cbe53d5e32.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0294991cc26b555aecd36c44185ba55f5ac9e7db01f050b3133e63cbe53d5e32.dll
Resource
win10v2004-20220901-en
General
-
Target
0294991cc26b555aecd36c44185ba55f5ac9e7db01f050b3133e63cbe53d5e32
-
Size
121KB
-
MD5
2243c3a87e771b2737501d5b73f4d0e0
-
SHA1
7b0fc5604e9493d504d4ba57dfedc17f88fc6742
-
SHA256
0294991cc26b555aecd36c44185ba55f5ac9e7db01f050b3133e63cbe53d5e32
-
SHA512
fbae6bebab4809628be047c09cf9ddd4505cfe0c1abf9eb2f3a9f685d9fbc33482ac57380b9bd3e7d81b988bf2ff1ec0e53bd172639ef59707e361b35af73d51
-
SSDEEP
1536:rX2e/TiC8w1w05fifJiY3Hqp81Bnyig/RB452bSeYAHpi10TDdLwp2rzvGlPv2O/:rX2ebiC32fs8mR252GeZHDy2rzvGhH
Malware Config
Signatures
Files
-
0294991cc26b555aecd36c44185ba55f5ac9e7db01f050b3133e63cbe53d5e32.dll windows x86
f226276fcd1a84bfb4167fc293fb761a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gstreamer
gst_pad_set_active
g_value_get_enum
g_cclosure_marshal_VOID__VOID
gst_element_iterate_src_pads
g_param_spec_boxed
gst_iterator_next
g_value_get_boolean
gst_iterator_resync
g_object_get
gst_element_message_full
g_value_unset
gst_static_caps_get
g_value_get_string
gst_element_class_add_pad_template
gst_structure_has_name
gst_element_add_pad
gst_element_release_request_pad
gst_element_register
gst_structure_id_set_value
gst_marshal_VOID__OBJECT_BOXED
gst_element_get_static_pad
g_once_init_leave
g_object_set
g_value_get_uint
g_type_check_instance_cast
gst_pad_get_parent_element
g_thread_functions_for_glib_use
g_list_sort
gst_element_factory_make
gst_static_pad_template_get
g_value_reset
gst_element_get_request_pad
g_param_spec_string
gst_caps_ref
g_type_name
gst_caps_unref
gst_message_new_async_done
gst_iterator_free
gst_element_remove_pad
gst_element_class_get_pad_template_list
g_value_set_boxed
gst_bin_remove
gst_pad_link
g_value_get_object
g_strdup_printf
gst_pad_get_caps_reffed
gst_ghost_pad_construct
gst_ghost_pad_new
g_free
gst_ghost_pad_set_target
gst_caps_replace
g_threads_got_initialized
g_type_check_class_cast
gst_pad_iterate_internal_links
gst_object_unref
gst_element_factory_get_type
gst_pad_add_event_probe
gst_registry_get_feature_list_cookie
g_value_array_copy
gst_value_list_get_type
g_intern_static_string
_gst_element_error_printf
gst_pad_get_type
gst_object_get_type
g_list_foreach
g_signal_connect_data
gst_caps_get_type
gst_caps_is_fixed
g_value_set_int
gst_pad_get_peer
gst_element_get_type
g_object_class_install_property
g_value_init
gst_pad_set_blocked_async_full
gst_plugin_feature_get_type
gst_plugin_feature_list_free
g_value_array_new
g_value_set_object
gst_element_factory_get_static_pad_templates
g_value_array_append
g_type_check_instance_is_a
gst_registry_feature_filter
g_value_array_sort
gst_plugin_feature_get_rank
g_once_impl
g_enum_register_static
g_value_peek_pointer
gst_caps_is_empty
gst_caps_is_any
g_type_register_static
gst_message_new_element
gst_pad_remove_event_probe
gst_structure_get_type
g_value_array_get_type
gst_ghost_pad_get_target
g_signal_handler_disconnect
g_value_take_string
gst_registry_get_default
g_value_set_boolean
gst_element_post_message
gst_element_factory_create
g_param_spec_uint64
gst_element_set_state
g_value_get_uint64
gst_structure_free
gst_element_get_factory
gst_object_get_parent
g_quark_from_static_string
g_value_get_int
gst_pad_get_negotiated_caps
g_list_remove
g_list_find
g_slice_free1
g_object_class_find_property
g_once_init_enter_impl
gst_object_set_name
gst_structure_id_set
gst_element_no_more_pads
g_value_set_uint64
gst_object_ref
gst_structure_id_empty_new
gst_value_set_structure
gst_value_list_append_value
g_value_get_boxed
gst_element_class_set_details_simple
gst_bin_add
g_type_register_static_simple
g_list_delete_link
g_list_prepend
gst_stream_error_quark
g_param_spec_int
g_value_set_enum
g_signal_handlers_disconnect_matched
g_signal_emit
g_param_spec_uint
gst_bin_get_type
g_value_set_uint
g_cclosure_marshal_VOID__OBJECT
gst_caps_get_structure
g_type_class_peek_parent
gst_element_iterate_sink_pads
g_strrstr
g_param_spec_boolean
g_signal_new
gst_core_error_quark
g_value_array_free
g_slice_alloc0
g_strdup
gst_structure_set
gst_element_factory_get_klass
g_object_new
gst_message_new_async_start
g_value_array_get_nth
gst_object_sink
gst_structure_get_name
gst_caps_can_intersect
gst_ghost_pad_get_type
g_value_array_remove
g_value_take_boxed
g_list_free
gst_pad_template_get_type
kernel32
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryA
WriteFile
HeapReAlloc
VirtualAlloc
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
Sleep
HeapFree
InterlockedDecrement
GetLastError
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
GetCurrentThreadId
Exports
Exports
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE