56df8399374b7bdcbddaedf154ba8cfa949bb88cef43395064eff8aa3727337b

Sharing

Copy URL Twitter E-mail

General

Target

56df8399374b7bdcbddaedf154ba8cfa949bb88cef43395064eff8aa3727337b
Size

190KB
MD5

a5022fa947423712a11a9090351ba6e5
SHA1

10375e9cc511b41aae7c274471263828a7dbfdfa
SHA256

56df8399374b7bdcbddaedf154ba8cfa949bb88cef43395064eff8aa3727337b
SHA512

88ad7cf952a50a59fca3dc36ddb6a5a7d89b629cf6131076cfc6b8e072774bfd0f82d1db2e4107088c0770a09fc411a95dc2837e397a623f41a6e3319a8cee3c
SSDEEP

3072:4fAb52eopWJTaGRsBzSf7P2ZAhQzvi9BJMIKEfr6lFCk/Zna5r2yFU7:+RWJTBRsuDvjKMMkeZaVhy7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56df8399374b7bdcbddaedf154ba8cfa949bb88cef43395064eff8aa3727337b

Files

56df8399374b7bdcbddaedf154ba8cfa949bb88cef43395064eff8aa3727337b
.dll windows x86

ba5d913c177064089a179e4173756f18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libgcc_s_dw2-1

__divdi3
__divmoddi4
__moddi3
__udivdi3
__udivmoddi4

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__mb_cur_max
__setusermatherr
_amsg_exit
_errno
_initterm
_iob
_lock
_strtoi64
_strtoui64
_unlock
_write
abort
atoi
calloc
free
fwrite
getc
gmtime
isspace
isxdigit
localeconv
malloc
memcpy
memmove
memset
realloc
setlocale
strchr
strcmp
strlen
strncmp
strncpy
strpbrk
strstr
strtol
strtoul
time
tolower
ungetc
vfprintf

ws2_32

getsockname
setsockopt

libgio-2.0-0

g_cancellable_cancel
g_cancellable_new
g_inet_address_to_string
g_inet_socket_address_get_address
g_inet_socket_address_get_port
g_input_stream_read
g_io_error_quark
g_io_stream_get_input_stream
g_io_stream_get_output_stream
g_output_stream_write
g_output_stream_writev
g_pollable_input_stream_create_source
g_pollable_input_stream_read_nonblocking
g_pollable_output_stream_create_source
g_pollable_output_stream_writev_nonblocking
g_socket_accept
g_socket_client_connect_to_host
g_socket_client_connect_to_uri
g_socket_client_get_tls
g_socket_client_get_tls_validation_flags
g_socket_client_new
g_socket_client_set_timeout
g_socket_client_set_tls
g_socket_client_set_tls_validation_flags
g_socket_close
g_socket_condition_check
g_socket_connection_factory_create_connection
g_socket_connection_get_socket
g_socket_create_source
g_socket_get_fd
g_socket_get_local_address
g_socket_get_remote_address
g_socket_get_timeout
g_socket_get_type
g_socket_set_timeout
g_tls_client_connection_get_server_identity
g_tls_connection_get_interaction
g_tls_connection_get_type
g_tls_connection_set_interaction
g_tls_database_verify_chain
g_tls_server_connection_new

libglib-2.0-0

g_array_append_vals
g_array_free
g_array_new
g_array_remove_index
g_ascii_dtostr
g_ascii_strcasecmp
g_ascii_strdown
g_ascii_strncasecmp
g_ascii_strtod
g_ascii_strtoll
g_ascii_strup
g_ascii_table
g_ascii_toupper
g_assertion_message_expr
g_base64_decode_step
g_base64_encode
g_base64_encode_close
g_base64_encode_step
g_checksum_free
g_checksum_get_string
g_checksum_new
g_checksum_reset
g_checksum_update
g_clear_error
g_cond_clear
g_cond_init
g_cond_signal
g_cond_wait_until
g_date_time_add_seconds
g_date_time_difference
g_date_time_get_day_of_month
g_date_time_get_hour
g_date_time_get_minute
g_date_time_get_month
g_date_time_get_seconds
g_date_time_get_year
g_date_time_new_utc
g_date_time_unref
g_error_matches
g_free
g_get_monotonic_time
g_hash_table_destroy
g_hash_table_insert
g_hash_table_lookup
g_hash_table_new
g_hash_table_new_full
g_intern_static_string
g_log
g_main_context_iteration
g_main_context_new
g_main_context_unref
g_main_context_wakeup
g_malloc
g_malloc0
g_malloc0_n
g_memdup2
g_mutex_clear
g_mutex_init
g_mutex_lock
g_mutex_unlock
g_once_init_enter
g_once_init_leave
g_print
g_ptr_array_add
g_ptr_array_free
g_ptr_array_new
g_random_int_range
g_return_if_fail_warning
g_set_error
g_snprintf
g_source_add_child_source
g_source_attach
g_source_is_destroyed
g_source_new
g_source_remove_child_source
g_source_set_callback
g_source_unref
g_strchomp
g_strchug
g_strdelimit
g_strdup
g_strdup_printf
g_strfreev
g_string_append_len
g_string_append_printf
g_string_free
g_string_free_and_steal
g_string_insert_len
g_string_new
g_strjoinv
g_strlcpy
g_strndup
g_strrstr
g_strsplit
g_strv_length
g_timeout_source_new
g_timer_destroy
g_timer_elapsed
g_timer_new
g_timer_start
g_try_malloc
g_uri_unescape_segment

libgobject-2.0-0

g_boxed_type_register_static
g_enum_register_static
g_flags_register_static
g_object_ref
g_object_unref
g_signal_connect_data
g_signal_emit
g_signal_new
g_source_set_dummy_callback
g_type_check_instance_is_a
g_type_interface_peek
g_type_register_static

libgstbase-1.0-0

gst_queue_array_free
gst_queue_array_get_length
gst_queue_array_new_for_struct
gst_queue_array_peek_nth_struct
gst_queue_array_pop_head_struct
gst_queue_array_push_tail_struct

libgstreamer-1.0-0

GST_CAT_DEFAULT
_gst_debug_min
gst_buffer_extract_dup
gst_buffer_get_size
gst_buffer_n_memory
gst_buffer_peek_memory
gst_debug_log
gst_library_error_quark
gst_memory_map
gst_memory_unmap
gst_mini_object_ref
gst_mini_object_replace
gst_mini_object_unref
gst_uri_join_strings
gst_util_double_to_fraction
gst_util_dump_buffer
gst_util_dump_mem
gst_util_gdouble_to_guint64
gst_util_uint64_scale_int

Exports

Exports

gst_rtsp_auth_credential_get_type
gst_rtsp_auth_credentials_free
gst_rtsp_auth_method_get_type
gst_rtsp_auth_param_copy
gst_rtsp_auth_param_free
gst_rtsp_auth_param_get_type
gst_rtsp_connection_accept
gst_rtsp_connection_clear_auth_params
gst_rtsp_connection_close
gst_rtsp_connection_connect
gst_rtsp_connection_connect_usec
gst_rtsp_connection_connect_with_response
gst_rtsp_connection_connect_with_response_usec
gst_rtsp_connection_create
gst_rtsp_connection_create_from_socket
gst_rtsp_connection_do_tunnel
gst_rtsp_connection_flush
gst_rtsp_connection_free
gst_rtsp_connection_get_ignore_x_server_reply
gst_rtsp_connection_get_ip
gst_rtsp_connection_get_read_socket
gst_rtsp_connection_get_remember_session_id
gst_rtsp_connection_get_tls
gst_rtsp_connection_get_tls_database
gst_rtsp_connection_get_tls_interaction
gst_rtsp_connection_get_tls_validation_flags
gst_rtsp_connection_get_tunnelid
gst_rtsp_connection_get_url
gst_rtsp_connection_get_write_socket
gst_rtsp_connection_is_tunneled
gst_rtsp_connection_next_timeout
gst_rtsp_connection_next_timeout_usec
gst_rtsp_connection_poll
gst_rtsp_connection_poll_usec
gst_rtsp_connection_read
gst_rtsp_connection_read_usec
gst_rtsp_connection_receive
gst_rtsp_connection_receive_usec
gst_rtsp_connection_reset_timeout
gst_rtsp_connection_send
gst_rtsp_connection_send_messages
gst_rtsp_connection_send_messages_usec
gst_rtsp_connection_send_usec
gst_rtsp_connection_set_accept_certificate_func
gst_rtsp_connection_set_auth
gst_rtsp_connection_set_auth_param
gst_rtsp_connection_set_content_length_limit
gst_rtsp_connection_set_http_mode
gst_rtsp_connection_set_ignore_x_server_reply
gst_rtsp_connection_set_ip
gst_rtsp_connection_set_proxy
gst_rtsp_connection_set_qos_dscp
gst_rtsp_connection_set_remember_session_id
gst_rtsp_connection_set_tls_database
gst_rtsp_connection_set_tls_interaction
gst_rtsp_connection_set_tls_validation_flags
gst_rtsp_connection_set_tunneled
gst_rtsp_connection_write
gst_rtsp_connection_write_usec
gst_rtsp_event_get_type
gst_rtsp_extension_after_send
gst_rtsp_extension_before_send
gst_rtsp_extension_configure_stream
gst_rtsp_extension_detect_server
gst_rtsp_extension_get_transports
gst_rtsp_extension_get_type
gst_rtsp_extension_parse_sdp
gst_rtsp_extension_receive_request
gst_rtsp_extension_send
gst_rtsp_extension_setup_media
gst_rtsp_extension_stream_select
gst_rtsp_family_get_type
gst_rtsp_find_header_field
gst_rtsp_find_method
gst_rtsp_generate_digest_auth_response
gst_rtsp_generate_digest_auth_response_from_md5
gst_rtsp_header_allow_multiple
gst_rtsp_header_as_text
gst_rtsp_header_field_get_type
gst_rtsp_lower_trans_get_type
gst_rtsp_message_add_header
gst_rtsp_message_add_header_by_name
gst_rtsp_message_append_headers
gst_rtsp_message_copy
gst_rtsp_message_dump
gst_rtsp_message_free
gst_rtsp_message_get_body
gst_rtsp_message_get_body_buffer
gst_rtsp_message_get_header
gst_rtsp_message_get_header_by_name
gst_rtsp_message_get_type
gst_rtsp_message_has_body_buffer
gst_rtsp_message_init
gst_rtsp_message_init_data
gst_rtsp_message_init_request
gst_rtsp_message_init_response
gst_rtsp_message_new
gst_rtsp_message_new_data
gst_rtsp_message_new_request
gst_rtsp_message_new_response
gst_rtsp_message_parse_auth_credentials
gst_rtsp_message_parse_data
gst_rtsp_message_parse_request
gst_rtsp_message_parse_response
gst_rtsp_message_remove_header
gst_rtsp_message_remove_header_by_name
gst_rtsp_message_set_body
gst_rtsp_message_set_body_buffer
gst_rtsp_message_steal_body
gst_rtsp_message_steal_body_buffer
gst_rtsp_message_take_body
gst_rtsp_message_take_body_buffer
gst_rtsp_message_take_header
gst_rtsp_message_take_header_by_name
gst_rtsp_message_unset
gst_rtsp_method_as_text
gst_rtsp_method_get_type
gst_rtsp_msg_get_type
gst_rtsp_msg_type_get_type
gst_rtsp_options_as_text
gst_rtsp_options_from_text
gst_rtsp_profile_get_type
gst_rtsp_range_convert_units
gst_rtsp_range_free
gst_rtsp_range_get_times
gst_rtsp_range_parse
gst_rtsp_range_to_string
gst_rtsp_range_unit_get_type
gst_rtsp_result_get_type
gst_rtsp_state_get_type
gst_rtsp_status_as_text
gst_rtsp_status_code_get_type
gst_rtsp_strresult
gst_rtsp_time_type_get_type
gst_rtsp_trans_mode_get_type
gst_rtsp_transport_as_text
gst_rtsp_transport_free
gst_rtsp_transport_get_manager
gst_rtsp_transport_get_media_type
gst_rtsp_transport_get_mime
gst_rtsp_transport_init
gst_rtsp_transport_new
gst_rtsp_transport_parse
gst_rtsp_url_copy
gst_rtsp_url_decode_path_components
gst_rtsp_url_free
gst_rtsp_url_get_port
gst_rtsp_url_get_request_uri
gst_rtsp_url_get_request_uri_with_control
gst_rtsp_url_get_type
gst_rtsp_url_parse
gst_rtsp_url_set_port
gst_rtsp_version_as_text
gst_rtsp_version_get_type
gst_rtsp_watch_attach
gst_rtsp_watch_get_send_backlog
gst_rtsp_watch_new
gst_rtsp_watch_reset
gst_rtsp_watch_send_message
gst_rtsp_watch_send_messages
gst_rtsp_watch_set_flushing
gst_rtsp_watch_set_send_backlog
gst_rtsp_watch_unref
gst_rtsp_watch_wait_backlog
gst_rtsp_watch_wait_backlog_usec
gst_rtsp_watch_write_data

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba5d913c177064089a179e4173756f18

Headers

DLL Characteristics

File Characteristics

Imports

libgcc_s_dw2-1

kernel32

msvcrt

ws2_32

libgio-2.0-0

libglib-2.0-0

libgobject-2.0-0

libgstbase-1.0-0

libgstreamer-1.0-0

Exports

Exports

Sections

.text Size: 109KB - Virtual size: 108KB

.data Size: 512B - Virtual size: 128B

.rdata Size: 28KB - Virtual size: 27KB

/4 Size: 16KB - Virtual size: 16KB

.bss Size: - Virtual size: 2KB

.edata Size: 7KB - Virtual size: 6KB

.idata Size: 8KB - Virtual size: 8KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 109KB - Virtual size: 108KB

.data
Size: 512B - Virtual size: 128B

.rdata
Size: 28KB - Virtual size: 27KB

/4
Size: 16KB - Virtual size: 16KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 7KB - Virtual size: 6KB

.idata
Size: 8KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 7KB - Virtual size: 7KB