0ec8b5db6d54e70d5a6cffbbbff02929a549c440f0b149463e19c90867e9411c

Sharing

Copy URL Twitter E-mail

General

Target

0ec8b5db6d54e70d5a6cffbbbff02929a549c440f0b149463e19c90867e9411c
Size

967KB
MD5

9418b3f59dc7efde6862d3595cbb6fed
SHA1

cf02f174b33ad9caa2ae6fc49f9779f2924d08d9
SHA256

0ec8b5db6d54e70d5a6cffbbbff02929a549c440f0b149463e19c90867e9411c
SHA512

2938c62855994882af2c7dd3c022b52dcd1c2cf880869d17349ab9bc26b864767b79d96f01708f2f5efeb0df2c97a1edb7e7a4dcbc62b607a8e7dd9797e3a840
SSDEEP

12288:DJt6GXiMpPX/EsEFNEhXETd5yeeUQ0EvDu6g8:Nt6GXiMpPvEsEFTTdoUQ04De8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ec8b5db6d54e70d5a6cffbbbff02929a549c440f0b149463e19c90867e9411c

Files

0ec8b5db6d54e70d5a6cffbbbff02929a549c440f0b149463e19c90867e9411c
.dll windows:6 windows x64 arch:x64

00d8a7db7168209675947da93e416b73

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

G:\jenkins\workspace\Git-NLEPlatformPro\Src\SymbolTable\Win\x64_Release\FilterPlugs.pdb

Imports

ws_imageproc

ord1
ord8
ord2
ord10
ord5
ord13
ord14
ord36
ord19

opencv_core320

?noArray@cv@@YAAEBV_InputOutputArray@1@XZ
??0Mat@cv@@QEAA@AEBV01@AEBV?$Rect_@H@1@@Z
?setTo@Mat@cv@@QEAAAEAV12@AEBV_InputArray@2@0@Z
?fastFree@cv@@YAXPEAX@Z
?copySize@Mat@cv@@QEAAXAEBV12@@Z
?error@cv@@YAXHAEBVString@1@PEBD1H@Z
?allocate@String@cv@@AEAAPEAD_K@Z
?deallocate@String@cv@@AEAAXXZ
?split@cv@@YAXAEBVMat@1@PEAV21@@Z
??4Mat@cv@@QEAAAEAV01@AEBV?$Scalar_@N@1@@Z
?create@Mat@cv@@QEAAXHPEBHH@Z
?zeros@Mat@cv@@SA?AVMatExpr@2@V?$Size_@H@2@H@Z
?deallocate@Mat@cv@@QEAAXXZ

opencv_imgproc320

?resize@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@V?$Size_@H@1@NNH@Z
?boxFilter@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@HV?$Size_@H@1@V?$Point_@H@1@_NH@Z
?boundingRect@cv@@YA?AV?$Rect_@H@1@AEBV_InputArray@1@@Z

msvcp120

?_Winerror_map@std@@YAPEBDH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0id@locale@std@@QEAA@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?uncaught_exception@std@@YA_NXZ
?flags@ios_base@std@@QEBAHXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Syserror_map@std@@YAPEBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Orphan_all@_Container_base0@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?good@ios_base@std@@QEBA_NXZ
?rdstate@ios_base@std@@QEBAHXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

msvcr120

_CxxThrowException
__CxxFrameHandler3
asinf
atan2f
atanf
ceilf
cos
cosf
exp
expf
floorf
fmod
log
log10
logf
memcpy
memset
pow
powf
??_V@YAXPEAX@Z
??3@YAXPEAX@Z
memmove
??2@YAPEAX_K@Z
_purecall
free
calloc
_hypot
_time64
tanf
malloc
srand
rint
_hypotf
fprintf
__iob_func
lrint
printf
roundf
_lock
_unlock
_calloc_crt
__dllonexit
__C_specific_handler
_onexit
?terminate@@YAXXZ
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
sin
sinf
sqrt
sqrtf
tan
rand

kernel32

GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId

Exports

Exports

FindEffectByID
GetEffectPixFormat
GetEffectPluginsInfo
GetEffectsCounts
SetMergeImagePath

Sections

.text
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00d8a7db7168209675947da93e416b73

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws_imageproc

opencv_core320

opencv_imgproc320

msvcp120

msvcr120

kernel32

Exports

Exports

Sections

.text Size: 508KB - Virtual size: 507KB

.rdata Size: 224KB - Virtual size: 223KB

.data Size: 168KB - Virtual size: 177KB

.pdata Size: 24KB - Virtual size: 24KB

_RDATA Size: 36KB - Virtual size: 35KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 508KB - Virtual size: 507KB

.rdata
Size: 224KB - Virtual size: 223KB

.data
Size: 168KB - Virtual size: 177KB

.pdata
Size: 24KB - Virtual size: 24KB

_RDATA
Size: 36KB - Virtual size: 35KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB