41383df966caccfab56d10e7779164cd

Sharing

Copy URL Twitter E-mail

General

Target

41383df966caccfab56d10e7779164cd
Size

107KB
MD5

41383df966caccfab56d10e7779164cd
SHA1

870d53049c5727c5c9b1d65084781da7198c0b65
SHA256

6c21dd06214071fd0ada016479bd93c9836057d6ce9881cd70578acdebf520c0
SHA512

6a70684a4e2dfc75a1fe6b43a3a90c302e0cb4a7893fd31a1b5450f829291088a29ca5cfb535b3ffd6ba373ed9cd105c0a3022d66c445dedf72320e050167885
SSDEEP

3072:3TBxkoHEeQhtN+bsBaa/TAYlMYHbSbr1IW0xlML:3TB/EeQhqbmaXYHObpa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41383df966caccfab56d10e7779164cd

Files

41383df966caccfab56d10e7779164cd
.dll windows:4 windows x86 arch:x86

c72d6303a3364c5cbeedbda60444274c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

__msg_Generic
__var_Create
mdate
picture_NewFromResource
picture_pool_Delete
picture_pool_NewExtended
var_GetChecked
vlc_clone
vlc_cond_destroy
vlc_cond_init
vlc_cond_signal
vlc_cond_wait
vlc_join
vlc_mutex_destroy
vlc_mutex_init
vlc_mutex_lock
vlc_mutex_unlock
vlc_plugin_set
vlc_restorecancel
vlc_savecancel
vout_display_PlacePicture
vout_window_Control

gdi32

BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
SelectObject
StretchBlt

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetVersionExA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_strdup
__dllonexit
__lc_codepage
__mb_cur_max
_assert
_errno
_iob
abort
calloc
fflush
fputc
free
fwrite
getenv
gmtime
localeconv
localtime
malloc
mbstowcs
memchr
memcpy
strchr
strlen
strpbrk
strspn
tolower
toupper
vfprintf
wcslen

ole32

CoCreateInstance
CoInitialize
CoUninitialize

shell32

ExtractIconA

user32

AdjustWindowRect
AppendMenuA
CheckMenuItem
ClientToScreen
CreateWindowExA
DefWindowProcA
DestroyIcon
DestroyWindow
DispatchMessageA
EqualRect
GetAncestor
GetClassInfoA
GetClientRect
GetCursorPos
GetDC
GetKeyState
GetMenuState
GetMessageA
GetMonitorInfoA
GetSystemMenu
GetSystemMetrics
GetWindowLongA
GetWindowPlacement
GetWindowRect
LoadCursorA
MapVirtualKeyA
MonitorFromWindow
OffsetRect
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseDC
SetForegroundWindow
SetParent
SetRectEmpty
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowCursor
ShowWindow
SystemParametersInfoA
TranslateMessage
ValidateRect
WindowFromPoint

Exports

Exports

vlc_entry__1_1_0e
vlc_entry_copyright__1_1_0e
vlc_entry_license__1_1_0e

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gnu_deb
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c72d6303a3364c5cbeedbda60444274c

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

gdi32

kernel32

msvcrt

ole32

shell32

user32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 36KB

.data Size: 512B - Virtual size: 32B

.rdata Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 163B

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 1KB - Virtual size: 1KB

.gnu_deb Size: 60KB - Virtual size: 60KB

.text
Size: 36KB - Virtual size: 36KB

.data
Size: 512B - Virtual size: 32B

.rdata
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 163B

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 1KB - Virtual size: 1KB

.gnu_deb
Size: 60KB - Virtual size: 60KB