52a4bf587ee885fc38e866ebf3d25a77e833eaffaa5f337601cf9c13a06ef5b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52a4bf587ee885fc38e866ebf3d25a77e833eaffaa5f337601cf9c13a06ef5b8
Size

28KB
MD5

cb8c0a7511b0c96551d672abde843057
SHA1

8813494f8fc8abd051d23b84308fd6f3f6fd569d
SHA256

52a4bf587ee885fc38e866ebf3d25a77e833eaffaa5f337601cf9c13a06ef5b8
SHA512

d6b0a73374832b363fd30c3086ef110428a61ab2e63a3478ec6e07f51a93ac1b1b9b9a4681f9bfd74661d578f661c027c8a4f75bdf3abd4468dc515e10eb001a
SSDEEP

384:aF5JIavp4mvdPaVBfnpxBPoK6vu1o75ObaVteQnE3JMfRyawaXRIq4/5bjAU:A5JIaR4mvdPWvsvFdeUTfRyazIBP/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52a4bf587ee885fc38e866ebf3d25a77e833eaffaa5f337601cf9c13a06ef5b8

Files

52a4bf587ee885fc38e866ebf3d25a77e833eaffaa5f337601cf9c13a06ef5b8
.dll windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Exports

Exports

H264_PARSER_Create
H264_PARSER_Destroy
H264_PARSER_GetNextFrame
H264_PARSER_GetNextKeyFrame
H264_PARSER_GetStreamType
H264_PARSER_InputData
H264_PARSER_Reset

Sections

.text
Size: 22KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE