a09c2e8e2d833746cf94cc9aea14de37f4d1c35b75f85401e5774533e5f0b2f2

General

Target

a09c2e8e2d833746cf94cc9aea14de37f4d1c35b75f85401e5774533e5f0b2f2
Size

88KB
MD5

0c1d3e37f0ab8cbfa4482bdfb51806d8
SHA1

d0d256ec4a3fb28b1470a1f404ce3df6dad3abb1
SHA256

a09c2e8e2d833746cf94cc9aea14de37f4d1c35b75f85401e5774533e5f0b2f2
SHA512

3c38b9e6eeede5af641295d57a4a2dc6f919a297019d75adbf55951dc9a740911293d337c4239af2b5d74f9564c74ebd725380001eea08d0e785019c6b827e84
SSDEEP

1536:kzX92omer6qPprgS+dC0A/MTo2HzxOOdAstpNs:+92Mr6ynRMTo2HzZtjs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a09c2e8e2d833746cf94cc9aea14de37f4d1c35b75f85401e5774533e5f0b2f2

Files

a09c2e8e2d833746cf94cc9aea14de37f4d1c35b75f85401e5774533e5f0b2f2
.dll windows:4 windows x86 arch:x86

5799396d732b5ececba6e1983dd46213

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
GetLastError
SetFilePointer
CloseHandle
ReadFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
FlushFileBuffers
CreateFileA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
RtlUnwind

Exports

Exports

a1801_dec_event
a1801_dec_frame
a1801_dec_frame_init
a1801_enc_event
a1801_enc_frame
a1801_enc_frame_init
dec
dec_event_frame
dec_event_frame_init
enc
enc_event_frame
enc_event_frame_init
get_bitrate
get_bitrate_info
get_err_str

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5799396d732b5ececba6e1983dd46213

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 32KB - Virtual size: 37KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 32KB - Virtual size: 37KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 2KB