0c5702459b4c5a9e1fef280f6ed2dd45

Sharing

Copy URL Twitter E-mail

General

Target

0c5702459b4c5a9e1fef280f6ed2dd45
Size

212KB
MD5

0c5702459b4c5a9e1fef280f6ed2dd45
SHA1

3858b5730c1c09aad438ea82839bd53c4f37d692
SHA256

423db4087e5f12aa2ee529788183a0821bfe43ec262adc2ce9565d42393f2f76
SHA512

ad8679b63c20fdb5f168bde143f61b33ca129f91f8ca5ed0c3a28bc608f494b2cb8d77300cb5133f09135fa1049e7697416a753a1f861fb00ee3924bcd83db21
SSDEEP

6144:KeIMANRsIUHFrrTQQnl/eJup7Xi5DL0DQ:LIMbJHt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c5702459b4c5a9e1fef280f6ed2dd45

Files

0c5702459b4c5a9e1fef280f6ed2dd45
.dll windows:5 windows x86 arch:x86

484e75d3a4507ac46c18433c9faf13ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libgstreamer-0.10

gst_event_new_flush_stop
_gst_element_error_printf
gst_pad_get_type
gst_object_get_type
gst_pad_pull_range
gst_mini_object_ref
gst_pad_pause_task
gst_query_set_duration
gst_pad_get_peer
gst_util_seqnum_next
gst_event_parse_seek
gst_pad_get_element_private
gst_structure_get_name
gst_pad_new_from_template
gst_caps_make_writable
gst_mini_object_copy
gst_pad_set_link_function
gst_value_array_append_value
gst_preset_get_type
gst_pad_get_negotiated_caps
gst_value_set_mini_object
gst_value_array_get_type
gst_structure_set_value
gst_event_type_get_name
gst_pad_get_caps
gst_element_class_get_pad_template
gst_fourcc_get_type
gst_caps_set_simple
gst_fraction_get_type
gst_query_parse_convert
gst_util_uint64_scale_int
gst_pad_template_new
gst_query_set_position
gst_query_parse_position
gst_query_set_convert
gst_caps_is_equal
gst_buffer_is_metadata_writable
gst_query_parse_duration
gst_pad_start_task
gst_object_unref
gst_pad_activate_pull
gst_message_new_segment_start
gst_event_new_eos
gst_pad_query_duration
gst_segment_set_seek
gst_element_remove_pad
gst_caps_ref
gst_type_register_static_full
gst_segment_set_last_stop
gst_structure_has_name
gst_util_uint64_scale
gst_pad_activate_push
gst_tag_list_new_full
gst_element_message_full
gst_tag_list_add
gst_element_found_tags
gst_pad_set_active
gst_query_set_seeking
gst_segment_init
gst_element_post_message
gst_tag_list_free
gst_pad_event_default
gst_message_new_segment_done
gst_pad_set_activatepush_function
gst_pad_query_default
gst_buffer_new
gst_pad_set_query_function
gst_object_get_parent
gst_event_new_new_segment
gst_object_set_name
gst_element_no_more_pads
gst_message_set_seqnum
gst_pad_set_activate_function
gst_object_ref
gst_event_new_flush_start
gst_event_set_seqnum
gst_pad_alloc_buffer_and_set_caps
gst_pad_set_getcaps_function
gst_stream_error_quark
gst_element_found_tags_for_pad
gst_flow_get_name
gst_pad_set_activatepull_function
gst_pad_check_pull_range
_gst_debug_register_funcptr
gst_segment_set_duration
gst_tag_list_new
gst_pad_stop_task
gst_object_sink
gst_query_parse_seeking
gst_event_get_seqnum
gst_pad_set_query_type_function
gst_element_class_set_details
gst_element_get_type
gst_pad_push
gst_buffer_create_sub
gst_caps_get_structure
gst_buffer_set_caps
_gst_debug_category_new
gst_pad_use_fixed_caps
__gst_debug_min
gst_value_get_mini_object
gst_caps_new_simple
gst_pad_set_event_function
gst_element_class_add_pad_template
gst_element_add_pad
gst_element_register
gst_pad_new_from_static_template
gst_pad_set_chain_function
gst_pad_set_setcaps_function
gst_debug_log
gst_static_pad_template_get
gst_mini_object_unref
gst_buffer_new_and_alloc
gst_caps_unref
gst_pad_push_event
gst_buffer_get_type
gst_pad_set_caps
gst_structure_get_value

libglib-2.0-0

g_once_init_leave
g_array_free
g_static_rec_mutex_unlock
g_array_new
g_list_append
g_once_init_enter_impl
g_array_insert_vals
g_list_delete_link
g_queue_pop_head
g_memdup
g_thread_functions_for_glib_use
g_strdup_printf
g_list_free
g_malloc0_n
g_free
g_threads_got_initialized
g_static_rec_mutex_lock
g_intern_static_string
g_list_foreach
g_array_set_size
g_array_append_vals
g_assertion_message_expr
g_log
g_queue_free
g_list_prepend
g_list_remove
g_assertion_message
g_slist_append
g_slist_foreach
g_slist_free
g_list_nth_data
g_list_concat
g_list_length
g_queue_peek_head
g_queue_get_length
g_queue_new
g_queue_push_tail
g_queue_peek_nth

libgobject-2.0-0

g_type_add_interface_static
g_type_class_peek_parent
g_type_check_instance_cast
g_type_check_class_cast
g_object_new
g_type_register_static_simple
g_value_set_uint64
g_value_get_uint64
g_param_spec_uint64
g_type_check_instance_is_a
g_value_unset
g_type_name
g_value_peek_pointer
g_type_register_static
g_object_class_install_property
g_value_init

msvcrt

_initterm
free
malloc
_XcptFilter
memcpy
memset
sscanf
time
srand
rand
atoi
_adjust_fdiv
_amsg_exit

libogg-0

ogg_stream_pageout
ogg_stream_flush
ogg_stream_packetin
ogg_page_eos
ogg_page_packets
ogg_page_pageno
ogg_sync_pageseek
ogg_page_bos
ogg_page_granulepos
ogg_sync_buffer
ogg_sync_clear
ogg_stream_clear
ogg_stream_reset
ogg_stream_pagein
ogg_page_serialno
ogg_sync_reset
ogg_sync_init
ogg_sync_wrote
ogg_stream_packetout
ogg_stream_init
ogg_sync_pageout
ogg_page_continued

kernel32

LoadLibraryA
RtlUnwind
GetProcAddress
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter

libgstriff-0.10

gst_riff_create_video_caps
gst_riff_create_video_template_caps
gst_riff_init
gst_riff_create_audio_template_caps
gst_riff_create_audio_caps

libgsttag-0.10

gst_tag_list_from_vorbiscomment_buffer

libgstbase-0.10

gst_collect_pads_set_function
gst_collect_pads_remove_pad
gst_collect_pads_new
gst_collect_pads_start
gst_collect_pads_stop
gst_collect_pads_add_pad_full
gst_collect_pads_peek
gst_collect_pads_pop

Exports

Exports

gst_plugin_desc

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

484e75d3a4507ac46c18433c9faf13ea

Headers

File Characteristics

Imports

libgstreamer-0.10

libglib-2.0-0

libgobject-2.0-0

msvcrt

libogg-0

kernel32

libgstriff-0.10

libgsttag-0.10

libgstbase-0.10

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 99KB - Virtual size: 98KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 99KB - Virtual size: 98KB

.reloc
Size: 6KB - Virtual size: 6KB