5befe5e1557ac188dd863bee6f2c5ce877215fb83f06ecad3a4210abdb52e18a

Sharing

Copy URL Twitter E-mail

General

Target

5befe5e1557ac188dd863bee6f2c5ce877215fb83f06ecad3a4210abdb52e18a
Size

643KB
MD5

de1b7d03644982a4eef58fa33f1421ba
SHA1

754e34b85bbdc2ba86f85d721a577b19158c5fb2
SHA256

5befe5e1557ac188dd863bee6f2c5ce877215fb83f06ecad3a4210abdb52e18a
SHA512

0a7c067110d04e2cb0bc1790d08a8c0da86e1d0f93a3a4bd8a094e2a6818daded5cdeceb12ebaf17c55f69a512dde8ab36ca7613d21e78f2e4164b6f0178d4c3
SSDEEP

12288:oQ3q6MxuECPCb1wxCOYBGYqx17SRcHpGQu:T0xuEqm1wxC0YC7G2GQu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5befe5e1557ac188dd863bee6f2c5ce877215fb83f06ecad3a4210abdb52e18a

Files

5befe5e1557ac188dd863bee6f2c5ce877215fb83f06ecad3a4210abdb52e18a
.dll regsvr32 windows:6 windows x64

feac57c733d4d2539dee06fd13e04a8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ole32

StringFromGUID2
CoUninitialize
CoCreateInstance
CoFreeUnusedLibraries
CoTaskMemFree
CoTaskMemAlloc
CoInitialize

user32

SendMessageW
GetCursorPos
EnumThreadWindows
PostQuitMessage
SetForegroundWindow
GetWindow
LoadImageW
RegisterClassExW
DestroyIcon
TranslateMessage
GetMessageW
UnregisterClassW
SetWindowPos
CreatePopupMenu
GetDlgItem
GetWindowLongW
DefWindowProcW
SetWindowLongPtrW
GetWindowLongPtrW
ShowWindow
MoveWindow
SetWindowLongW
InvalidateRect
CreateDialogParamW
GetWindowRect
DestroyWindow
LoadStringW
GetDesktopWindow
DestroyMenu
TrackPopupMenu
SendDlgItemMessageW
DispatchMessageW
InsertMenuItemW
CreateWindowExW
PostMessageW

oleaut32

SysFreeString
VariantClear
SysAllocString
OleCreatePropertyFrame

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
UrlGetPartW
PathRemoveFileSpecA

avformat-lav-60

av_mkv_set_next_edition
avpriv_new_chapter
av_mkv_get_editions
av_mkv_get_edition
avio_alloc_context
avio_flush
av_mkv_get_num_editions
av_read_frame
av_seek_frame
av_lav_stream_parser_set_needed
avformat_find_stream_info
avformat_close_input
avformat_get_riff_video_tags
av_demuxer_iterate
av_read_play
avformat_alloc_context
av_find_input_format
av_format_inject_global_side_data
avformat_open_input
av_lav_stream_parser_update_flags
avpriv_mpegts_add_stream
av_lav_stream_parser_get_needed
av_lav_stream_parser_init
av_lav_stream_parser_get_flags
avformat_index_get_entries_count
avformat_index_get_entry
av_lav_stream_codec_info_nb_frames
av_stream_get_side_data
av_find_program_from_stream
avformat_get_riff_audio_tags
av_codec_get_tag

avutil-lav-58

av_freep
av_opt_get
av_opt_set_int
av_dict_free
av_dict_get
av_dict_set
av_log_set_callback
av_rescale
av_asprintf
av_reduce
av_opt_set
av_rescale_q
av_display_rotation_get
av_channel_layout_default
av_mallocz
av_free
av_dict_copy
av_pix_fmt_get_chroma_sub_sample
av_channel_layout_describe
av_get_pix_fmt_name
av_fourcc_make_string
av_get_bytes_per_sample
av_get_bits_per_pixel
av_pix_fmt_desc_get

kernel32

LoadLibraryExW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
WaitForSingleObject
CloseHandle
ResetEvent
SetEvent
Sleep
TlsFree
GetModuleFileNameA
lstrlenW
lstrlenA
MultiByteToWideChar
GetLastError
GetVersionExW
DisableThreadLibraryCalls
GetCurrentProcess
ReleaseSemaphore
GetCurrentThreadId
CreateEventW
CreateSemaphoreW
lstrcmpW
GetModuleFileNameW
FreeLibrary
GetProcAddress
CreateThread
GetModuleHandleW
RaiseException
WideCharToMultiByte
OutputDebugStringW
SetLastError
InitializeCriticalSectionEx
DecodePointer
EncodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
GetStringTypeW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
ExitThread
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RtlPcToFileHeader
CreateFileW
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
HeapFree
HeapAlloc
GetStdHandle
GetFileType
HeapReAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
RtlUnwindEx

advapi32

RegQueryValueExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyW
RegSetValueW

shell32

Shell_NotifyIconW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

avcodec-lav-60

avcodec_profile_name
avcodec_find_decoder
av_get_bits_per_sample
avcodec_descriptor_get
av_packet_free
av_shrink_packet
av_packet_alloc
av_new_packet
av_grow_packet
av_packet_ref
av_packet_unref
av_packet_get_side_data

libbluray

bd_get_current_chapter
bd_find_seek_point
bd_get_clpi
bd_select_title
bd_get_title_mpls
bd_get_clip_infos
bd_get_event
bd_set_debug_mask
bd_seek
bd_get_title_size
bd_tell
bd_read
bd_close
bd_get_title_info
bd_read_clpi
bd_free_clpi
bd_open
bd_get_titles
bd_free_title_info

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 423KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

feac57c733d4d2539dee06fd13e04a8f

Headers

DLL Characteristics

File Characteristics

Imports

ole32

user32

oleaut32

comctl32

shlwapi

avformat-lav-60

avutil-lav-58

kernel32

advapi32

shell32

version

avcodec-lav-60

libbluray

Exports

Exports

Sections

.text Size: 423KB - Virtual size: 422KB

.rdata Size: 140KB - Virtual size: 139KB

.data Size: 32KB - Virtual size: 38KB

.pdata Size: 21KB - Virtual size: 20KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 423KB - Virtual size: 422KB

.rdata
Size: 140KB - Virtual size: 139KB

.data
Size: 32KB - Virtual size: 38KB

.pdata
Size: 21KB - Virtual size: 20KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 7KB - Virtual size: 7KB