2ef55deb03750bd728b31a9049f97ebacb88b39f3c6e5b23465d374e282c6b76

Sharing

Copy URL Twitter E-mail

General

Target

2ef55deb03750bd728b31a9049f97ebacb88b39f3c6e5b23465d374e282c6b76
Size

213KB
MD5

c7508da3648d4268a6febb8a1d86fd90
SHA1

5839d6311fcc48238d5020183654bb1c52785f75
SHA256

2ef55deb03750bd728b31a9049f97ebacb88b39f3c6e5b23465d374e282c6b76
SHA512

662b596b405f22dba5528e469c3a595c450fe3a9644fb47241bc4e00eafbf9ec8ccc09f71c68be38ab9f3cf09cfcb7a86efc9988e7f29a15babb6bf869c846b8
SSDEEP

3072:snLzRI0fbuJtrYJ1BU1KFdS9rv82zRhmK0Cq2rFJXbcF0gaLCXv03Z6Igr0MjGE:s3RYJtrYbBGKFdm9m9J2rrSaBuhG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ef55deb03750bd728b31a9049f97ebacb88b39f3c6e5b23465d374e282c6b76

Files

2ef55deb03750bd728b31a9049f97ebacb88b39f3c6e5b23465d374e282c6b76
.dll windows:6 windows x86

47867c891dec06bcb46b2168cdb3388b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfplat

MFGetStrideForBitmapInfoHeader
MFCreateMemoryBuffer
MFCreateSample
MFStartup
MFCreateFile
MFCreateAttributes
MFCreateSourceResolver
MFShutdown
MFCopyImage
MFCreateMediaType

mf

MFEnumDeviceSources
MFCreateMPEG4MediaSink

mfreadwrite

MFCreateSourceReaderFromMediaSource
MFCreateSinkWriterFromMediaSink

winmm

timeGetTime

d3d9

Direct3DCreate9

kernel32

GetACP
IsValidCodePage
FindNextFileW
Sleep
WaitForSingleObject
CloseHandle
RaiseException
GetLastError
InitializeCriticalSectionEx
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
DecodePointer
InitializeCriticalSection
LocalAlloc
GlobalAlloc
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceW
GetProcAddress
LoadLibraryW
GetTickCount
CreateFileW
GetFileSize
GlobalLock
ReadFile
GlobalUnlock
MulDiv
GetCurrentProcessId
LoadLibraryA
GetOEMCP
FreeResource
WriteFile
FindFirstFileExW
FindClose
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetFileType
GetStdHandle
LCMapStringW
HeapFree
HeapAlloc
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
HeapSize
WriteConsoleW
HeapReAlloc
GetStringTypeW
SetStdHandle
ReadConsoleW
FlushFileBuffers
SetEndOfFile
FreeLibrary
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
SetLastError
InterlockedFlushSList
RtlUnwind
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW

user32

SetRect
GetClientRect
DispatchMessageW
TranslateMessage
PeekMessageW
GetKeyState
DrawIconEx
GetIconInfo
LoadIconW
GetWindowTextW
GetWindowThreadProcessId
GetForegroundWindow
ReleaseDC
GetDC
SetTimer
KillTimer
PostMessageW
LoadCursorW
UpdateLayeredWindow
GetCursorInfo
GetWindowRect
RegisterClassW
CreateWindowExW
DefWindowProcW
DestroyWindow

gdi32

CreateBitmap
GetStockObject
StretchBlt
SetStretchBltMode
SetTextColor
SetBkColor
BitBlt
DeleteObject
PatBlt
SelectObject
GetDeviceCaps
GetDIBits
GetObjectW
DeleteDC
CreateDIBSection
GdiFlush
CreateCompatibleDC

ole32

CoTaskMemFree
CoCreateInstance
CoUninitialize
PropVariantClear
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize

oleaut32

OleLoadPicture

shlwapi

ord219
PathFileExistsW

Exports

Exports

AddKeyFrame
CanRecordSystemAudio
CheckAVDevice
CheckAudioFile
CheckVideoFile
CloseAVDevice
CreateScreenRecorder
DrawVideoFrame
EnableRecSystemAudio
EncoderCloseDevice
EncoderInitDevice
EncoderQueryDevice
EncoderSetFilename
EncoderSetStartEncodePosForInteIndex
EncoderSetVideoPreviewHandle
EncoderStart
EncoderState
EncoderStop
EncoderTransparent
GetAudioVolume
GetMediaDuration
GetTestRecordTime
ReleaseScreenRecorder
ScreenRecorder_InitRecordScreen
ScreenRecorder_IsInitFinished
ScreenRecorder_PauseRecord
ScreenRecorder_StartRecord
ScreenRecorder_StopRecord
SetCaptureArea
SetCaptureFrameRate
SetCaptureKeyframeInterval
SetTransparentWindow
SetVolumeMeter
StartTestRecordAudio
StopTestRecordAudio
fsGetAudioDevice
fsQueryAudioDevice
fsQueryVideoDevice
fsResetAVDevice
fsSetAudioDevice
fsSetAudioSuppressionLevel
fsSetExcludeCaptureMode
fsSetVideoDevice

Sections

.text
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47867c891dec06bcb46b2168cdb3388b

Headers

DLL Characteristics

File Characteristics

Imports

mfplat

mf

mfreadwrite

winmm

d3d9

kernel32

user32

gdi32

ole32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 149KB - Virtual size: 149KB

.rdata Size: 43KB - Virtual size: 43KB

.data Size: 11KB - Virtual size: 13KB

.rsrc Size: 1024B - Virtual size: 704B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 149KB - Virtual size: 149KB

.rdata
Size: 43KB - Virtual size: 43KB

.data
Size: 11KB - Virtual size: 13KB

.rsrc
Size: 1024B - Virtual size: 704B

.reloc
Size: 7KB - Virtual size: 6KB