e656864f7de9fc04a60828b1714869d373728c087f8a771b297d0da18c286687

Sharing

Copy URL Twitter E-mail

General

Target

e656864f7de9fc04a60828b1714869d373728c087f8a771b297d0da18c286687
Size

26KB
MD5

5cc1d4a5a1ec5435338301ca3b4e82fb
SHA1

726f5bb22f1b8675e52dd31f2e3b57f13ed81955
SHA256

e656864f7de9fc04a60828b1714869d373728c087f8a771b297d0da18c286687
SHA512

78f613c2f9406e55978f6122b28133351044bb8ab6aec78f9353232ef5eb6db4c3c90621985637eff69ed82c8a67a071054ae5ed3c544665a3e83287034d0824
SSDEEP

384:4nVt9H9rEI4qNz1J1euK4kODiYdQ5R/GP01eM5OAzRkGZ:4nnNlEI4q7+uK4kVp1REAN/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e656864f7de9fc04a60828b1714869d373728c087f8a771b297d0da18c286687

Files

e656864f7de9fc04a60828b1714869d373728c087f8a771b297d0da18c286687
.dll windows x86

38e8146fa08703489aa6e5120004fa19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libgraphic

gs_effect_create_from_file
gs_draw_sprite
gs_effect_set_texture
gs_effect_set_vec4
gs_effect_set_float
gs_effect_loop
gs_image_file_init_texture
gs_effect_set_bool
gs_image_file_init
gs_image_file_free
gs_effect_set_vec2
gs_matrix_pop
gs_matrix_scale3f
gs_matrix_push
gs_effect_get_param_by_name

avcodec-lx-58

_data_item_next
_properties_add_list
_data_get_bool
_data_set_default_double
_data_set_default_bool
_data_first
_property_list_add_string
_data_get_string
_data_get_double
_properties_create
_data_set_default_string
_source_audio_pending
_properties_add_path
_property_list_add_int
_source_get_width
_source_release
_properties_set_flags
_data_create_from_json_file
_source_get_proc_handler
_source_video_render
_source_remove_active_child
_source_get_height
_source_get_audio_mix
_properties_get
_source_add_active_child
_data_create
_property_set_description
_source_set_monitoring_type
_transition_video_render_direct
_property_set_modified_callback
_transition_get_time
_source_create_private
_properties_add_int
_data_set_string
_transition_audio_render
_data_item_get_name
_data_release
_properties_add_float
_properties_add_bool
_data_set_default_int
_properties_add_int_slider
_properties_add_color
_leave_graphics
_find_module_file
_enter_graphics
_data_get_int
_source_get_audio_timestamp
_source_update
_transition_enable_fixed
_transition_video_render
_module_load_locale
_register_source_s
_data_item_get_string

platformutils

bfree
blog
text_lookup_getstr
text_lookup_destroy
dstr_ncat
dstr_copy
bmalloc

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm_e

kernel32

GetCurrentProcessId
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
UnhandledExceptionFilter
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess

api-ms-win-crt-math-l1-1-0

_except1

Exports

Exports

_module_free_locale
_module_load
_module_set_locale
_module_set_pointer
_module_ver

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38e8146fa08703489aa6e5120004fa19

Headers

DLL Characteristics

File Characteristics

Imports

libgraphic

avcodec-lx-58

platformutils

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 1KB - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 1KB - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB