d010e320c9f0633f02dd61ed0adb9a4665a8933d508cf753ccc90d76e4237954

Sharing

Copy URL Twitter E-mail

General

Target

d010e320c9f0633f02dd61ed0adb9a4665a8933d508cf753ccc90d76e4237954
Size

92KB
MD5

8eb41f697779a386b5d9a89726184048
SHA1

084c4ddc35003783704d5559b313623ddc8c7e3c
SHA256

d010e320c9f0633f02dd61ed0adb9a4665a8933d508cf753ccc90d76e4237954
SHA512

37a314d83ced509a9c426ab44ede06261315c8c11b35153d50e632c7dd949e7713a3163370814727944f3072405cd0e44158ce933dfe79454e760ce4dad1b54d
SSDEEP

1536:EhOedzIEwKnZ/4Swsp5k7FPzz+LqTYxadgSTJa0VkFoQhZ+bzKHgNkiM8zNbVd8v:EoedzIEwKnZDwAkJ+kYxaLTZsXhZ+yCk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d010e320c9f0633f02dd61ed0adb9a4665a8933d508cf753ccc90d76e4237954

Files

d010e320c9f0633f02dd61ed0adb9a4665a8933d508cf753ccc90d76e4237954
.dll windows x86

e2d1776c0f6e6b765069770e8134fdf2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

platformutils

blog
profile_reenable_thread
profile_store_name
os_sleepto_ns
os_sleep_ms
os_process_pipe_write
os_fopen
os_gettime_ns
os_unlink
os_generate_formatted_filename
base_get_alignment
os_event_wait
astrcmpi
bmalloc
bfree
brealloc
dstr_copy
dstr_cat_dstr
dstr_ncat
dstr_insert_ch
dstr_catf
dstr_replace
os_process_pipe_create
os_event_reset
blogva
os_set_thread_name
strref_cmp
cf_adderror
cf_preprocessor_free
error_data_buildstring
cf_lexer_free
cf_pass_pair
cf_lexer_lex
cf_preprocessor_init
cf_preprocess
cf_lexer_init
os_event_init
os_event_destroy
os_event_try
os_event_signal
os_dlclose
os_dlopen
text_lookup_getstr
text_lookup_destroy
profile_end
profile_start
bmemdup
strlist_free
strlist_split
astrcmpi_n
os_sem_wait
os_sem_post
os_sem_destroy
os_sem_init
os_process_pipe_destroy

avcodec-lx-58

_output_begin_data_capture
_output_end_data_capture
_output_signal_stop
_encoder_get_codec
_encoder_get_sample_rate
_encoder_get_extra_data
_encoder_get_settings
_encoder_packet_ref
_encoder_packet_release
_properties_get
_properties_add_bool
_properties_add_list
_property_set_modified_callback
_property_set_visible
_property_list_add_string
_property_list_item_disable
_property_list_item_count
_encoder_get_width
_encoder_get_height
_encoder_get_preferred_video_format
_encoder_video
_avc_keyframe
_extract_avc_headers
_get_video_info
_get_audio_info
_output_video
_output_set_video_conversion
_output_set_audio_conversion
_data_set_double
_data_set_bool
_data_set_default_double
_data_get_double
_properties_set_flags
_output_initialize_encoders
_properties_add_int_slider
_properties_add_path
_property_set_long_description
_property_list_add_int
_hotkey_register_source
_source_get_settings
_source_get_name
_source_get_proc_handler
_source_active
_source_output_video
_source_preload_video
_source_show_preloaded_video
_source_output_audio
_source_update_properties
_source_update_playback_time
_source_set_async_unbuffered
_register_source_s
_register_encoder_s
_register_output_s
_module_load_locale
_output_can_begin_data_capture
_output_set_last_error
_output_get_height
_output_get_width
_output_get_audio_encoder
_output_get_video_encoder
_output_get_proc_handler
_output_get_settings
_output_get_name
_get_video
_get_audio
_find_module_file
_hotkey_unregister
_data_set_default_int
_data_get_int
_properties_create
_properties_add_int
_encoder_get_name
_encoder_audio
_data_release
_data_set_default_string
_data_set_default_bool
_get_profiler_name_store
_data_get_string
_data_get_bool
_properties_add_text
_hotkey_register_output
_properties_add_float

avcodec-57

avcodec_flush_buffers
avcodec_parameters_to_context
avcodec_parameters_copy
av_packet_ref
av_hwaccel_next
avcodec_receive_frame
avcodec_find_decoder_by_name
avcodec_find_decoder
avcodec_free_context
avcodec_get_name
avcodec_find_encoder
av_init_packet
avcodec_fill_audio_frame
avcodec_find_encoder_by_name
avcodec_receive_packet
avcodec_send_frame
av_packet_unref
avcodec_close
avcodec_open2
avcodec_alloc_context3
avcodec_register_all
avcodec_send_packet

avutil-55

av_image_alloc
av_dict_count
av_dict_free
av_opt_set_int
av_pix_fmt_get_chroma_sub_sample
av_log_default_callback
av_get_default_channel_layout
av_get_channel_layout
av_dict_set_int
av_log_set_callback
av_dict_get
av_rescale_rnd
av_frame_get_buffer
av_frame_free
av_dict_parse_string
av_frame_alloc
av_opt_set
av_samples_alloc
av_free
av_rescale_q_rnd
av_rescale_q
av_freep
av_get_media_type_string
av_strerror
av_frame_unref

avformat-57

avformat_close_input
avformat_alloc_context
avio_open
av_find_input_format
avio_open2
avio_close
av_register_all
avformat_network_init
avformat_free_context
avformat_new_stream
avformat_alloc_output_context2
avformat_write_header
av_interleaved_write_frame
av_write_trailer
av_guess_format
av_dump_format
av_find_best_stream
av_read_frame
av_seek_frame
avformat_open_input
avformat_find_stream_info

swscale-4

sws_freeContext
sws_scale
sws_getCoefficients
sws_getContext
sws_setColorspaceDetails
sws_getCachedContext

swresample-2

swr_get_delay
swr_free
swr_convert
swr_init
swr_alloc_set_opts

thutils

t_mutexattr_settype
t_mutexattr_init
t_mutex_unlock
t_mutex_lock
t_mutex_destroy
t_mutex_init
t_detach
t_join
t_create

avdevice-57

avdevice_register_all

kernel32

TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW

vcruntime140

memcpy
memset
memmove
strchr
strrchr
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

fclose

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-math-l1-1-0

ceil
_except1

api-ms-win-crt-runtime-l1-1-0

_cexit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
terminate

Exports

Exports

_module_free_locale
_module_load
_module_set_locale
_module_set_pointer
_module_unload
_module_ver
audio_resampler_create
audio_resampler_destroy
audio_resampler_resample

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2d1776c0f6e6b765069770e8134fdf2

Headers

DLL Characteristics

File Characteristics

Imports

platformutils

avcodec-lx-58

avcodec-57

avutil-55

avformat-57

swscale-4

swresample-2

thutils

avdevice-57

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 65KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 1KB - Virtual size: 2KB

.gfids Size: 512B - Virtual size: 28B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 66KB - Virtual size: 65KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 1KB - Virtual size: 2KB

.gfids
Size: 512B - Virtual size: 28B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB