133948e88b6d86fffe594bae193e55a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

133948e88b6d86fffe594bae193e55a4
Size

45KB
MD5

133948e88b6d86fffe594bae193e55a4
SHA1

5085efb68bccf49817f308b53f6be45b395497ad
SHA256

233f2a93c9f159065e759bfd8be1ccb70c45984c51961ceaf3a2da9d58aa531e
SHA512

d73ca9f3857ee85a6ee661837dd7481ae945955147033642e1e23b05fc0ab9b5cb7a89c685d2816a3ee0ef90d7dfa6bfd9e85626eca842a97213a8bafcd23940
SSDEEP

768:vOGqkF7aVsz9GczcFb4poT8sPRIpq3Nddhk/uZc+IbnTDQ:2GqO7aVsZiILsJYo5hXwT8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
133948e88b6d86fffe594bae193e55a4

Files

133948e88b6d86fffe594bae193e55a4
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ