gmescapi[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

gmescapi.dll
Size

117KB
MD5

2bcb2ce00f4193ce583d2291b0d9e12b
SHA1

2c01f1945d4633cc3e08438dc5e3090c3e47252f
SHA256

d603b0200c35af286c8330be7a652eb2c2aa586eb0c3268b21c389fbcfd70405
SHA512

dc6a84d234ff9229070776e734b397ec6c8ac28a218bee3b8ba993699a361f874538bd36844a47042a4f67c9752e1129c47eaf4c0677437341f2f5a88f75c7a4
SSDEEP

1536:DRBfCfyagE6UXlb3/0EhE1CjMVMayROy9iJcGaQsWjcdv+PoVokyz:LfCffgEJVQEsCAtlQfv+AVoky

Score

1^/10

Malware Config

Signatures

Files

gmescapi.dll
.dll windows x86

f9a2c3e4c1a55265a12784b38b4a9ffa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfplat

MFCopyImage
MFStartup
MFGetStrideForBitmapInfoHeader
MFCreateAttributes

mf

MFEnumDeviceSources

mfreadwrite

MFCreateSourceReaderFromMediaSource

shlwapi

ord219

kernel32

QueryPerformanceCounter
WriteConsoleW
SetStdHandle
CloseHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateThread
LCMapStringW
GetLastError
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
SetLastError
GetFileType
GetStartupInfoW
GetModuleFileNameA
CreateFileW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
RtlUnwind
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
HeapReAlloc

ole32

CoInitializeEx
CoInitialize
CoTaskMemFree

Exports

Exports

ESCAPIDLLVersion
ESCAPIVersion
RegisterCallbacks
countCaptureDevices
deinitCapture
doCapture
getCaptureDeviceName
getCaptureErrorCode
getCaptureErrorLine
getCapturePropertyAuto
getCapturePropertyValue
gm_escapi_capture
gm_escapi_capture_async
gm_escapi_capture_async_ext
gm_escapi_count
gm_escapi_free
gm_escapi_get_camera_name
gm_escapi_get_capture_prop
gm_escapi_get_focus_frames
gm_escapi_get_sys_capture_props
gm_escapi_init
gm_escapi_is_capture_prop_auto
gm_escapi_is_capture_prop_ignore
gm_escapi_last_error
gm_escapi_max_count
gm_escapi_reset_capture_props
gm_escapi_set_buffer
gm_escapi_set_capture_prop
gm_escapi_set_focus_frames
gm_escapi_set_sys_capture_props
gm_escapi_version
initCOM
initCapture
initCaptureWithOptions
isCaptureDone
setBufferAddress
setCaptureProperty

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9a2c3e4c1a55265a12784b38b4a9ffa

Headers

DLL Characteristics

File Characteristics

Imports

mfplat

mf

mfreadwrite

shlwapi

kernel32

ole32

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 74KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 5KB - Virtual size: 14KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 75KB - Virtual size: 74KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 5KB - Virtual size: 14KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 6KB - Virtual size: 5KB