General

  • Target

    e35c2ea7e84eab0406012f45c6d8bb4e5dbe3fb8d4ecdc351a49d0087b3be793

  • Size

    1.5MB

  • MD5

    c500e0006a08e6c808db9eef28e58881

  • SHA1

    95040d522f104f7d918ad61b94192eb7954fd6c0

  • SHA256

    e35c2ea7e84eab0406012f45c6d8bb4e5dbe3fb8d4ecdc351a49d0087b3be793

  • SHA512

    10907cb0112e531255306434c6090e0588d35cc59d49f7c6aaee983a0030798ac8d190d41fa7bb8af8e05c042f82f0dcf73a7ca2f8ba6c0453c6ad481a421c5a

  • SSDEEP

    24576:iCpfwJFmxX5RJPgAXQbH2QAs/YnZorCOGHOs6WmRGWrHRyPoGlJaTlQ5:iCyOXhoqQbHLcg/GusZmRGIHUPx/W65

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • e35c2ea7e84eab0406012f45c6d8bb4e5dbe3fb8d4ecdc351a49d0087b3be793
    .zip
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/BiliDMLib.cdf-ms
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/BiliDMLib.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/BiliDMLib.manifest
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/BilibiliDM_PluginFramework.cdf-ms
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/BilibiliDM_PluginFramework.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/BilibiliDM_PluginFramework.manifest
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Bililive_dm.cdf-ms
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Bililive_dm.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Bililive_dm.exe.cdf-ms
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Bililive_dm.exe.config
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Bililive_dm.exe.manifest
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Bililive_dm.manifest
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Brotli.Core.cdf-ms
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Brotli.Core.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Brotli.Core.manifest
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/JetBrains.Annotations.cdf-ms
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/JetBrains.Annotations.dll
    .dll .js windows x86
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/JetBrains.Annotations.manifest
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Newtonsoft.Json.cdf-ms
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Newtonsoft.Json.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Newtonsoft.Json.manifest
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/System.Runtime.InteropServices.RuntimeInformation.cdf-ms
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/System.Runtime.InteropServices.RuntimeInformation.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/System.Runtime.InteropServices.RuntimeInformation.manifest
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/Win32/libwtfdanmaku.dll
    .dll windows x86

    e4c8fb6aa73a48602d686ad72846fa2e


    Headers

    Imports

    Exports

    Sections

  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/brolib_x64.dll
    .dll windows x64

    10033053d04f10f8dd58e18b71fecb77


    Headers

    Imports

    Exports

    Sections

  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/brolib_x86.dll
    .dll windows x86

    ff98d730c7b4fbaa92b85279e37acb21


    Headers

    Imports

    Exports

    Sections

  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/en-US/Bililive_dm.resources.cdf-ms
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/en-US/Bililive_dm.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/en-US/Bililive_dm.resources.manifest
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/ico.ico
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/ja-JP/Bililive_dm.resources.cdf-ms
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/ja-JP/Bililive_dm.resources.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/ja-JP/Bililive_dm.resources.manifest
  • bili..tion_0000000000000000_0001.0001_0bc3859a0bf455ce/x64/libwtfdanmaku.dll
    .dll windows x64

    812744eaa5c050fa898761bb4a1e17ea


    Headers

    Imports

    Exports

    Sections