8325edf3c20061d9f7278cdaeb31e25ff771da82c02f23d820fc69201176b177

Sharing

Copy URL Twitter E-mail

General

Target

8325edf3c20061d9f7278cdaeb31e25ff771da82c02f23d820fc69201176b177
Size

73KB
MD5

59f06072cdbed5f44e6750252fd5d853
SHA1

1bf83109a3067b080393b1a3c8fecfa370bff6ba
SHA256

8325edf3c20061d9f7278cdaeb31e25ff771da82c02f23d820fc69201176b177
SHA512

f207708e5873b5c3abe9c3c1c9bb97fcd71686cb138c1f98ae54609028163de3ea1bf6cb3acc648d4c36a1189c405e435dd0d8a3f1a3bbde403891c87c6294bd
SSDEEP

768:pZ9Jpd8wLiz7FQV1WP2VyaluE+JnIBy123lZesekUa04AM2xpS4CPr3yYZHLZp/D:NtLkBgrBU123lZeJXZg3Tcw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8325edf3c20061d9f7278cdaeb31e25ff771da82c02f23d820fc69201176b177

Files

8325edf3c20061d9f7278cdaeb31e25ff771da82c02f23d820fc69201176b177
.dll windows x86

00b24d6c24bae5df7d13e82c98a97595

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
_write
abort
calloc
free
fwrite
memcpy
memset
realloc
strlen
strncmp
vfprintf

libglib-2.0-0

g_ascii_table
g_free
g_malloc
g_malloc0
g_malloc_n
g_memdup2
g_return_if_fail_warning
g_strdup_printf
g_strjoin

libgobject-2.0-0

g_type_name
g_value_init
g_value_unset

libgstreamer-1.0-0

_gst_bitmask_type
_gst_buffer_type
_gst_debug_category_new
_gst_debug_dump_mem
_gst_debug_min
_gst_element_error_printf
_gst_fraction_range_type
_gst_fraction_type
_gst_int_range_type
gst_buffer_copy_region
gst_buffer_extract
gst_buffer_get_size
gst_buffer_map
gst_buffer_new_wrapped
gst_buffer_unmap
gst_caps_append
gst_caps_from_string
gst_caps_new_empty
gst_caps_new_empty_simple
gst_caps_new_simple
gst_caps_set_simple
gst_debug_log
gst_element_message_full
gst_mini_object_unref
gst_pad_pull_range
gst_stream_error_quark
gst_tag_get_type
gst_tag_list_add
gst_tag_list_add_value
gst_tag_list_is_empty
gst_tag_list_new_empty
gst_util_uint64_scale_int
gst_value_deserialize

libgstaudio-1.0-0

gst_audio_channel_positions_to_valid_order
gst_audio_format_build_integer
gst_audio_format_to_string
gst_audio_get_channel_reorder_map

libgsttag-1.0-0

gst_tag_freeform_string_to_utf8

Exports

Exports

gst_riff_create_audio_caps
gst_riff_create_audio_template_caps
gst_riff_create_iavs_caps
gst_riff_create_iavs_template_caps
gst_riff_create_video_caps
gst_riff_create_video_template_caps
gst_riff_init
gst_riff_parse_chunk
gst_riff_parse_file_header
gst_riff_parse_info
gst_riff_parse_strf_auds
gst_riff_parse_strf_iavs
gst_riff_parse_strf_vids
gst_riff_parse_strh
gst_riff_read_chunk

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 152B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 595B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00b24d6c24bae5df7d13e82c98a97595

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

libglib-2.0-0

libgobject-2.0-0

libgstreamer-1.0-0

libgstaudio-1.0-0

libgsttag-1.0-0

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.data Size: 512B - Virtual size: 60B

.rdata Size: 10KB - Virtual size: 10KB

/4 Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 152B

.edata Size: 1024B - Virtual size: 595B

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 43KB

.data
Size: 512B - Virtual size: 60B

.rdata
Size: 10KB - Virtual size: 10KB

/4
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 152B

.edata
Size: 1024B - Virtual size: 595B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 4KB - Virtual size: 4KB