mp4decrypt[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

mp4decrypt.exe
Size

357KB
MD5

73124bc10d2dea0e220a4b669307485a
SHA1

93eca0538165ea8079156df9c068876e3e071b34
SHA256

52e463f518014ac03e4d5e6dfaa3400c11a9c93cf30fd01301ba404fdf72a74d
SHA512

ee21deccef35bf3af90a7c6eff1e49ac62e79244561f9cd767bb82747775cde392123cdd86cd245ea20466f848b18fc2574020eff654a962fad34e97103f9dc2
SSDEEP

6144:RiVcIoRC/yUlZWO5PdBzQ6XQRcbskgIonoU243xgNldqqDL6Y6gIgk97C:Rq8YDlQ4lh4E5lgqn6TJC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mp4decrypt.exe

Files

mp4decrypt.exe
.exe windows x64

b0749227ae772c82e2022cc8013c1cba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

MultiByteToWideChar
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW

vcruntime140

__std_exception_copy
__std_exception_destroy
_purecall
__RTDynamicCast
__current_exception_context
memset
_CxxThrowException
__std_terminate
memcpy
__C_specific_handler
__current_exception

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

_fseeki64
__stdio_common_vfprintf
__p__commode
_set_fmode
__stdio_common_vsnprintf_s
_setmode
fwrite
_ftelli64
__acrt_iob_func
fread
_fileno
fflush
feof
fclose
_wfopen_s

api-ms-win-crt-runtime-l1-1-0

_exit
__p___argc
__p___argv
_cexit
_c_exit
_initterm
_initterm_e
_get_initial_narrow_environment
_configure_narrow_argv
terminate
_set_app_type
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_seh_filter_exe
exit
_initialize_narrow_environment
_register_thread_local_exe_atexit_callback

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
_set_new_mode
free

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0749227ae772c82e2022cc8013c1cba

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 206KB - Virtual size: 205KB

.rdata Size: 115KB - Virtual size: 115KB

.data Size: 12KB - Virtual size: 13KB

.pdata Size: 16KB - Virtual size: 15KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 206KB - Virtual size: 205KB

.rdata
Size: 115KB - Virtual size: 115KB

.data
Size: 12KB - Virtual size: 13KB

.pdata
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 6KB - Virtual size: 5KB