72b8cc7260473a09d004749322c4f7520e1c508f3b971004be22faeaa75b1969

Sharing

Copy URL Twitter E-mail

General

Target

72b8cc7260473a09d004749322c4f7520e1c508f3b971004be22faeaa75b1969
Size

399KB
MD5

9b8163d6af1b782d33ab70d059bcf6e5
SHA1

9fee093fb3a674950aa8055a22f494153bcc5b82
SHA256

72b8cc7260473a09d004749322c4f7520e1c508f3b971004be22faeaa75b1969
SHA512

a644bab1bc9e800280376f55a949c9213f0b4ad639f6309c68fb87ca4c11394d4b8a20f169c8bd9b83d49df4efd55b2249c8553ee44df144a2a899b3a2ff8105
SSDEEP

6144:nY7BRqG9t8J9Nd1gAdmizEVyB25YFjAzhHHV2eA1mpJCkGMpPPNWR35lqiqGENM7:Y7B4GgNd5zfCJCTWVWt5lYN8w1xM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72b8cc7260473a09d004749322c4f7520e1c508f3b971004be22faeaa75b1969

Files

72b8cc7260473a09d004749322c4f7520e1c508f3b971004be22faeaa75b1969
.dll windows x86

fb0efa760db9efa7b78e52efa581ad2c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libgcc_s_dw2-1

__udivdi3

kernel32

CloseHandle
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionEx
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
SetThreadPriority
Sleep
SleepConditionVariableCS
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WakeConditionVariable

msvcrt

_amsg_exit
_beginthreadex
_initterm
_iob
_lock
_unlock
_write
abort
calloc
free
fwrite
malloc
memcpy
memmove
memset
realloc
strlen
strncmp
vfprintf

Exports

Exports

VP8BitReaderSetBuffer
VP8CheckSignature
VP8Clear
VP8Decode
VP8DecodeMB
VP8DecompressAlphaRows
VP8Delete
VP8DitherCombine8x8
VP8DspInit
VP8DspInitSSE2
VP8DspInitSSE41
VP8EnterCritical
VP8ExitCritical
VP8FiltersInit
VP8FiltersInitSSE2
VP8GetCPUInfo
VP8GetHeaders
VP8GetInfo
VP8GetSignedValue
VP8GetThreadMethod
VP8GetValue
VP8HFilter16
VP8HFilter16i
VP8HFilter8
VP8HFilter8i
VP8InitBitReader
VP8InitClipTables
VP8InitDithering
VP8InitFrame
VP8InitIoInternal
VP8InitRandom
VP8InitScanline
VP8LAddGreenToBlueAndRed
VP8LAddGreenToBlueAndRed_C
VP8LBitReaderSetBuffer
VP8LBuildHuffmanTable
VP8LCheckSignature
VP8LClear
VP8LColorCacheClear
VP8LColorCacheCopy
VP8LColorCacheInit
VP8LColorIndexInverseTransformAlpha
VP8LConvertBGRAToBGR
VP8LConvertBGRAToBGR_C
VP8LConvertBGRAToRGB
VP8LConvertBGRAToRGB565
VP8LConvertBGRAToRGB565_C
VP8LConvertBGRAToRGBA
VP8LConvertBGRAToRGBA4444
VP8LConvertBGRAToRGBA4444_C
VP8LConvertBGRAToRGBA_C
VP8LConvertBGRAToRGB_C
VP8LConvertFromBGRA
VP8LDecodeAlphaHeader
VP8LDecodeAlphaImageStream
VP8LDecodeHeader
VP8LDecodeImage
VP8LDelete
VP8LDoFillBitWindow
VP8LDspInit
VP8LDspInitSSE2
VP8LDspInitSSE41
VP8LGetInfo
VP8LHtreeGroupsFree
VP8LHtreeGroupsNew
VP8LInitBitReader
VP8LInverseTransform
VP8LMapColor32b
VP8LMapColor8b
VP8LNew
VP8LPredictor0_C
VP8LPredictor10_C
VP8LPredictor11_C
VP8LPredictor12_C
VP8LPredictor13_C
VP8LPredictor1_C
VP8LPredictor2_C
VP8LPredictor3_C
VP8LPredictor4_C
VP8LPredictor5_C
VP8LPredictor6_C
VP8LPredictor7_C
VP8LPredictor8_C
VP8LPredictor9_C
VP8LPredictors
VP8LPredictorsAdd
VP8LPredictorsAdd_C
VP8LReadBits
VP8LTransformColorInverse
VP8LTransformColorInverse_C
VP8LoadFinalBytes
VP8New
VP8ParseIntraModeRow
VP8ParseProba
VP8ParseQuant
VP8PredChroma8
VP8PredLuma16
VP8PredLuma4
VP8ProcessRow
VP8RemapBitReader
VP8ResetProba
VP8SetError
VP8SimpleHFilter16
VP8SimpleHFilter16i
VP8SimpleVFilter16
VP8SimpleVFilter16i
VP8Status
VP8StatusMessage
VP8Transform
VP8TransformAC3
VP8TransformDC
VP8TransformDCUV
VP8TransformUV
VP8TransformWHT
VP8VFilter16
VP8VFilter16i
VP8VFilter8
VP8VFilter8i
VP8YuvToArgb32_SSE2
VP8YuvToBgr32_SSE2
VP8YuvToBgr32_SSE41
VP8YuvToBgra32_SSE2
VP8YuvToRgb32_SSE2
VP8YuvToRgb32_SSE41
VP8YuvToRgb56532_SSE2
VP8YuvToRgba32_SSE2
VP8YuvToRgba444432_SSE2
VP8kabs0
VP8kclip1
VP8ksclip1
VP8ksclip2
WebPAllocateDecBuffer
WebPAlphaReplace
WebPApplyAlphaMultiply
WebPApplyAlphaMultiply4444
WebPAvoidSlowMemory
WebPCheckCropDimensions
WebPConvertARGBToUV
WebPConvertARGBToUV_C
WebPConvertARGBToY
WebPConvertBGR24ToY
WebPConvertRGB24ToY
WebPConvertRGBA32ToUV
WebPConvertRGBA32ToUV_C
WebPCopyDecBuffer
WebPCopyDecBufferPixels
WebPCopyPixels
WebPCopyPlane
WebPDeallocateAlphaMemory
WebPDecode
WebPDecodeARGB
WebPDecodeARGBInto
WebPDecodeBGR
WebPDecodeBGRA
WebPDecodeBGRAInto
WebPDecodeBGRInto
WebPDecodeRGB
WebPDecodeRGBA
WebPDecodeRGBAInto
WebPDecodeRGBInto
WebPDecodeYUV
WebPDecodeYUVInto
WebPDequantizeLevels
WebPDispatchAlpha
WebPDispatchAlphaToGreen
WebPEstimateBestFilter
WebPExtractAlpha
WebPExtractGreen
WebPFilters
WebPFlipBuffer
WebPFree
WebPFreeDecBuffer
WebPGetColorPalette
WebPGetDecoderVersion
WebPGetFeaturesInternal
WebPGetInfo
WebPGetLinePairConverter
WebPGetWorkerInterface
WebPGrabDecBuffer
WebPHasAlpha32b
WebPHasAlpha8b
WebPIAppend
WebPIDecGetRGB
WebPIDecGetYUVA
WebPIDecode
WebPIDecodedArea
WebPIDelete
WebPINewDecoder
WebPINewRGB
WebPINewYUV
WebPINewYUVA
WebPISetIOHooks
WebPIUpdate
WebPInitAlphaProcessing
WebPInitAlphaProcessingSSE2
WebPInitAlphaProcessingSSE41
WebPInitConvertARGBToYUV
WebPInitConvertARGBToYUVSSE2
WebPInitConvertARGBToYUVSSE41
WebPInitCustomIo
WebPInitDecBufferInternal
WebPInitDecoderConfigInternal
WebPInitSamplers
WebPInitSamplersSSE2
WebPInitSamplersSSE41
WebPInitUpsamplers
WebPInitUpsamplersSSE2
WebPInitUpsamplersSSE41
WebPInitYUV444Converters
WebPInitYUV444ConvertersSSE2
WebPInitYUV444ConvertersSSE41
WebPIoInitFromOptions
WebPMalloc
WebPMultARGBRow
WebPMultARGBRow_C
WebPMultARGBRows
WebPMultRow
WebPMultRow_C
WebPMultRows
WebPPackRGB
WebPParseHeaders
WebPRescaleNeededLines
WebPRescalerDspInit
WebPRescalerDspInitSSE2
WebPRescalerExport
WebPRescalerExportRow
WebPRescalerExportRowExpand
WebPRescalerExportRowExpand_C
WebPRescalerExportRowShrink
WebPRescalerExportRowShrink_C
WebPRescalerGetScaledDimensions
WebPRescalerImport
WebPRescalerImportRow
WebPRescalerImportRowExpand
WebPRescalerImportRowExpand_C
WebPRescalerImportRowShrink
WebPRescalerImportRowShrink_C
WebPRescalerInit
WebPResetDecParams
WebPSafeCalloc
WebPSafeFree
WebPSafeMalloc
WebPSamplerProcessPlane
WebPSamplers
WebPSetWorkerInterface
WebPUnfilters
WebPUpsamplers
WebPYUV444Converters
WebPYuv444ToArgb_C
WebPYuv444ToBgr_C
WebPYuv444ToBgra_C
WebPYuv444ToRgb565_C
WebPYuv444ToRgb_C
WebPYuv444ToRgba4444_C
WebPYuv444ToRgba_C
kVP8Log2Range
kVP8NewRange

Sections

.text
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 968B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb0efa760db9efa7b78e52efa581ad2c

Headers

DLL Characteristics

File Characteristics

Imports

libgcc_s_dw2-1

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 335KB - Virtual size: 335KB

.data Size: 512B - Virtual size: 112B

.rdata Size: 15KB - Virtual size: 15KB

/4 Size: 26KB - Virtual size: 26KB

.bss Size: - Virtual size: 968B

.edata Size: 7KB - Virtual size: 7KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 335KB - Virtual size: 335KB

.data
Size: 512B - Virtual size: 112B

.rdata
Size: 15KB - Virtual size: 15KB

/4
Size: 26KB - Virtual size: 26KB

.bss
Size: - Virtual size: 968B

.edata
Size: 7KB - Virtual size: 7KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 8KB - Virtual size: 8KB