e02ba7654df201658e9c1a548cf86c5b6bd17e888457378f989d602f4de6d920

Sharing

Copy URL

Twitter E-mail

General

Target

e02ba7654df201658e9c1a548cf86c5b6bd17e888457378f989d602f4de6d920
Size

9.6MB
MD5

ebe0c541f6d1c8120dc770e239c200d2
SHA1

f12df936bddf14eeef75ae66003d3a4f8cfe6d1e
SHA256

e02ba7654df201658e9c1a548cf86c5b6bd17e888457378f989d602f4de6d920
SHA512

e97a9d8fe9458c0cb6a2e98e7dc8d3af75a948e48c78735b28544f6d4c8fdd6302b7fcebb6a3c9d00ff14b06a403ebb240609b643bac867d4974035ed4d788bd
SSDEEP

98304:Gx7egCDEw60MFZphlNnxVar14dc7JS0ZU0etdyV6m0RNfm2m2r5OBWcjOpf:+7egCDD6hFZphlNxVar1srH9hOO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e02ba7654df201658e9c1a548cf86c5b6bd17e888457378f989d602f4de6d920

Files

e02ba7654df201658e9c1a548cf86c5b6bd17e888457378f989d602f4de6d920
.dll windows x64

4f426082904ea1acb3dc678bc601c9c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitOnceBeginInitialize
InitOnceComplete
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_errno
_initterm
_lock
_setjmp
_strtoi64
_strtoui64
_unlock
abort
calloc
exit
fclose
feof
fopen
fputc
fread
free
fseek
fwrite
getc
getenv
isspace
isxdigit
localeconv
log10
longjmp
malloc
memcmp
memcpy
memmove
memset
qsort
rand
realloc
strcmp
strerror
strlen
strncmp
strtol
strtoul
tanh
tolower
ungetc
vfprintf
wcslen

libwinpthread-1

pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_wait
pthread_create
pthread_join
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock

Exports

Exports

aom_codec_av1_cx
aom_codec_av1_cx_algo
aom_codec_build_config
aom_codec_control
aom_codec_destroy
aom_codec_enc_config_default
aom_codec_enc_config_set
aom_codec_enc_init_ver
aom_codec_encode
aom_codec_err_to_string
aom_codec_error
aom_codec_error_detail
aom_codec_get_caps
aom_codec_get_cx_data
aom_codec_get_global_headers
aom_codec_get_preview_frame
aom_codec_iface_name
aom_codec_set_cx_data_buf
aom_codec_set_option
aom_codec_version
aom_codec_version_extra_str
aom_codec_version_str
aom_film_grain_table_append
aom_film_grain_table_free
aom_film_grain_table_write
aom_flat_block_finder_init
aom_flat_block_finder_run
aom_free
aom_img_add_metadata
aom_img_alloc
aom_img_alloc_with_border
aom_img_flip
aom_img_free
aom_img_get_metadata
aom_img_metadata_alloc
aom_img_metadata_array_alloc
aom_img_metadata_array_free
aom_img_metadata_free
aom_img_num_metadata
aom_img_plane_height
aom_img_plane_width
aom_img_remove_metadata
aom_img_set_rect
aom_img_wrap
aom_malloc
aom_noise_model_get_grain_parameters
aom_noise_model_init
aom_noise_model_save_latest
aom_noise_model_update
aom_rb_bytes_read
aom_rb_read_bit
aom_rb_read_literal
aom_rb_read_uvlc
aom_read_obu_header_and_size
aom_uleb_decode
aom_uleb_encode
aom_uleb_encode_fixed_size
aom_uleb_size_in_bytes
aom_wb_bytes_written
aom_wb_write_bit
aom_wb_write_literal
aom_wb_write_unsigned_literal
av1_resize_frame420

Sections

.text
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 750KB - Virtual size: 750KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 305KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f426082904ea1acb3dc678bc601c9c9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

libwinpthread-1

Exports

Exports

Sections

.text Size: 7.2MB - Virtual size: 7.2MB

.data Size: 26KB - Virtual size: 26KB

.rdata Size: 750KB - Virtual size: 750KB

.pdata Size: 78KB - Virtual size: 77KB

.xdata Size: 142KB - Virtual size: 142KB

.bss Size: - Virtual size: 305KB

.edata Size: 2KB - Virtual size: 2KB

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 14KB - Virtual size: 13KB

/4 Size: 3KB - Virtual size: 2KB

/19 Size: 110KB - Virtual size: 109KB

/31 Size: 21KB - Virtual size: 20KB

/45 Size: 58KB - Virtual size: 57KB

/57 Size: 8KB - Virtual size: 8KB

/70 Size: 1KB - Virtual size: 1KB

/81 Size: 11KB - Virtual size: 11KB

/97 Size: 72KB - Virtual size: 72KB

/113 Size: 3KB - Virtual size: 2KB

.text
Size: 7.2MB - Virtual size: 7.2MB

.data
Size: 26KB - Virtual size: 26KB

.rdata
Size: 750KB - Virtual size: 750KB

.pdata
Size: 78KB - Virtual size: 77KB

.xdata
Size: 142KB - Virtual size: 142KB

.bss
Size: - Virtual size: 305KB

.edata
Size: 2KB - Virtual size: 2KB

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 14KB - Virtual size: 13KB

/4
Size: 3KB - Virtual size: 2KB

/19
Size: 110KB - Virtual size: 109KB

/31
Size: 21KB - Virtual size: 20KB

/45
Size: 58KB - Virtual size: 57KB

/57
Size: 8KB - Virtual size: 8KB

/70
Size: 1KB - Virtual size: 1KB

/81
Size: 11KB - Virtual size: 11KB

/97
Size: 72KB - Virtual size: 72KB

/113
Size: 3KB - Virtual size: 2KB