00317e976844068237665025b311e393908a0f7ba416a0c2bca82e8dc1c4fba6

Sharing

Copy URL Twitter E-mail

General

Target

00317e976844068237665025b311e393908a0f7ba416a0c2bca82e8dc1c4fba6
Size

260KB
MD5

6046eedea1ec095e7d60896324124159
SHA1

ca8213b4aaa1885dcaf72f2d02906404f6bfa5a6
SHA256

00317e976844068237665025b311e393908a0f7ba416a0c2bca82e8dc1c4fba6
SHA512

2106a60b028999bbf36c0c5b2a4c290f7876af4fc912e5989c226e113e4a63db118da7be6d858ff6ed4bb0094932eb55bb1d99029063d1eeeadbff3623b63e49
SSDEEP

3072:ICTDyJcwJEfUZ+ZK/PTsldZ+xImryHNtvEQF8wKo7+YLOnLLdmjmy8aAYtXac9FW:I4CczeXoImmrCKG+YWPdmjbzXac3W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00317e976844068237665025b311e393908a0f7ba416a0c2bca82e8dc1c4fba6

Files

00317e976844068237665025b311e393908a0f7ba416a0c2bca82e8dc1c4fba6
.dll windows x86

e45fc9d618953cf35f67946e5c4ea520

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

avutil-58

av_bprint_chars
av_bprint_init
av_bprint_init_for_buffer
av_bprintf
av_buffer_allocz
av_buffer_pool_get
av_buffer_pool_init
av_buffer_pool_uninit
av_buffer_ref
av_buffer_unref
av_calloc
av_channel_layout_channel_from_index
av_channel_layout_check
av_channel_layout_compare
av_channel_layout_copy
av_channel_layout_describe
av_channel_layout_from_mask
av_channel_layout_from_string
av_channel_layout_index_from_channel
av_channel_layout_subset
av_channel_layout_uninit
av_cpu_max_align
av_csp_luma_coeffs_from_avcsp
av_d2q
av_default_item_name
av_dict_count
av_dict_free
av_dict_get
av_dict_iterate
av_dict_set
av_dynarray_add_nofree
av_expr_eval
av_expr_free
av_expr_parse
av_fifo_alloc2
av_fifo_can_read
av_fifo_freep2
av_fifo_read
av_fifo_write
av_find_best_pix_fmt_of_2
av_frame_alloc
av_frame_copy
av_frame_copy_props
av_frame_free
av_frame_get_side_data
av_frame_is_writable
av_frame_move_ref
av_frame_new_side_data
av_frame_ref
av_frame_remove_side_data
av_free
av_freep
av_get_bytes_per_sample
av_get_channel_layout
av_get_channel_layout_nb_channels
av_get_extended_channel_layout
av_get_media_type_string
av_get_packed_sample_fmt
av_get_pix_fmt
av_get_pix_fmt_name
av_get_planar_sample_fmt
av_get_sample_fmt
av_get_sample_fmt_name
av_get_token
av_hwframe_get_buffer
av_image_check_size2
av_image_fill_linesizes
av_image_fill_plane_sizes
av_log
av_log_once
av_malloc
av_malloc_array
av_mallocz
av_memdup
av_opt_find2
av_opt_free
av_opt_get_chlayout
av_opt_get_int
av_opt_get_key_value
av_opt_get_sample_fmt
av_opt_next
av_opt_set
av_opt_set_defaults
av_opt_set_dict2
av_opt_set_int
av_pix_fmt_desc_get
av_realloc_array
av_rescale
av_rescale_q
av_sample_fmt_is_planar
av_samples_copy
av_samples_get_buffer_size
av_samples_set_silence
av_set_options_string
av_strdup
av_strerror
av_strlcatf
av_strlcpy
av_strtod
av_strtok
av_tx_init
av_tx_uninit
avpriv_set_systematic_pal2

swresample-4

swr_alloc
swr_alloc_set_opts2
swr_convert
swr_free
swr_get_class
swr_get_delay
swr_init
swr_next_pts

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__mb_cur_max
__setusermatherr
_amsg_exit
_errno
_hypot
_initterm
_iob
_lock
_strtoi64
_strtoui64
_unlock
abort
atoi
calloc
fputc
free
fwrite
getc
isspace
isxdigit
localeconv
log10
malloc
memcpy
memmove
memset
realloc
setlocale
strchr
strcmp
strerror
strlen
strncmp
strspn
strtol
strtoul
tan
tolower
ungetc
vfprintf
wcslen

Exports

Exports

av_buffersink_get_ch_layout
av_buffersink_get_channel_layout
av_buffersink_get_channels
av_buffersink_get_format
av_buffersink_get_frame
av_buffersink_get_frame_flags
av_buffersink_get_frame_rate
av_buffersink_get_h
av_buffersink_get_hw_frames_ctx
av_buffersink_get_sample_aspect_ratio
av_buffersink_get_sample_rate
av_buffersink_get_samples
av_buffersink_get_time_base
av_buffersink_get_type
av_buffersink_get_w
av_buffersink_set_frame_size
av_buffersrc_add_frame
av_buffersrc_add_frame_flags
av_buffersrc_close
av_buffersrc_get_nb_failed_requests
av_buffersrc_parameters_alloc
av_buffersrc_parameters_set
av_buffersrc_write_frame
av_filter_ffversion
av_filter_iterate
avfilter_config_links
avfilter_configuration
avfilter_filter_pad_count
avfilter_free
avfilter_get_by_name
avfilter_get_class
avfilter_graph_alloc
avfilter_graph_alloc_filter
avfilter_graph_config
avfilter_graph_create_filter
avfilter_graph_dump
avfilter_graph_free
avfilter_graph_get_filter
avfilter_graph_parse
avfilter_graph_parse2
avfilter_graph_parse_ptr
avfilter_graph_queue_command
avfilter_graph_request_oldest
avfilter_graph_segment_apply
avfilter_graph_segment_apply_opts
avfilter_graph_segment_create_filters
avfilter_graph_segment_free
avfilter_graph_segment_init
avfilter_graph_segment_link
avfilter_graph_segment_parse
avfilter_graph_send_command
avfilter_graph_set_auto_convert
avfilter_init_dict
avfilter_init_str
avfilter_inout_alloc
avfilter_inout_free
avfilter_insert_filter
avfilter_license
avfilter_link
avfilter_link_free
avfilter_pad_get_name
avfilter_pad_get_type
avfilter_process_command
avfilter_version

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e45fc9d618953cf35f67946e5c4ea520

Headers

DLL Characteristics

File Characteristics

Imports

avutil-58

swresample-4

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 186KB - Virtual size: 186KB

.data Size: 1024B - Virtual size: 536B

.rdata Size: 32KB - Virtual size: 31KB

/4 Size: 24KB - Virtual size: 24KB

.bss Size: - Virtual size: 18KB

.edata Size: 2KB - Virtual size: 2KB

.idata Size: 5KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 186KB - Virtual size: 186KB

.data
Size: 1024B - Virtual size: 536B

.rdata
Size: 32KB - Virtual size: 31KB

/4
Size: 24KB - Virtual size: 24KB

.bss
Size: - Virtual size: 18KB

.edata
Size: 2KB - Virtual size: 2KB

.idata
Size: 5KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 5KB - Virtual size: 4KB