5a2ff365c5a9b5a2a0259d568054ba59

Sharing

Copy URL

Twitter E-mail

General

Target

5a2ff365c5a9b5a2a0259d568054ba59
Size

92KB
MD5

5a2ff365c5a9b5a2a0259d568054ba59
SHA1

8989b4637624b5c16a4705c172723a3b8310a78c
SHA256

6c8928f9f4138bc68a7217da6fa467d5314e024056f65605e611079f5c01040a
SHA512

b4e954381b64386e5e09fb60a6e8c21f8288b6f6a32205316b9a7cc2f1d045308fb38fb5d7cdb584f5b54948d4dd3337b3bf4f3fcdab93a062094f26f12d25f5
SSDEEP

1536:HGEtwJMOK6g5lYj+Vc9B80az8rDF/U9rm4dKcK/zXZ8S+cRwN4YZRiotbRoFeOrO:HGexh6g5ej+Vc7p6o/lDcKjXByVgO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a2ff365c5a9b5a2a0259d568054ba59

Files

5a2ff365c5a9b5a2a0259d568054ba59
.dll windows:4 windows x86 arch:x86

9ebe9015d0709e7d4d0f70cef4d299b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

__msg_Generic
__var_Create
date_Get
date_Increment
date_Init
date_Set
demux_vaControlHelper
es_format_Clean
es_format_Init
stream_Block
var_GetChecked
vlc_fourcc_GetCodecFromString
vlc_plugin_set

kernel32

DeleteCriticalSection
EnterCriticalSection
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__dllonexit
__lc_codepage
__mb_cur_max
_errno
_iob
abort
fflush
fputc
free
fwrite
getenv
gmtime
localeconv
localtime
malloc
memchr
memcpy
strchr
strlen
strpbrk
strspn
toupper
vfprintf
wcslen

Exports

Exports

vlc_entry__1_1_0e
vlc_entry_copyright__1_1_0e
vlc_entry_license__1_1_0e

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gnu_deb
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ebe9015d0709e7d4d0f70cef4d299b5

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 24KB

.data Size: 512B - Virtual size: 32B

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 163B

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 700B

.gnu_deb Size: 60KB - Virtual size: 60KB

.text
Size: 25KB - Virtual size: 24KB

.data
Size: 512B - Virtual size: 32B

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 163B

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 700B

.gnu_deb
Size: 60KB - Virtual size: 60KB