306354997fdec66772f26aab3dd7bc40c8f780dcf11658ff954eb542d97f4f3b

Sharing

Copy URL Twitter E-mail

General

Target

306354997fdec66772f26aab3dd7bc40c8f780dcf11658ff954eb542d97f4f3b
Size

24KB
MD5

8614cf64f802a2fcaa3503e952b43d9b
SHA1

41a3177c0c99a0a28fdf57b5cd98a962cd2a3ba2
SHA256

306354997fdec66772f26aab3dd7bc40c8f780dcf11658ff954eb542d97f4f3b
SHA512

79f636ea2bdcc4b50ba15da7649f2f1a261fae29f014b81c98b19ebf68e49a66d889fae45964c789b2d50ee3644c537d314ac1095e7b568baa79080c59753a34
SSDEEP

384:WH4GSktlGfb5fQNXgU+Q9hmTfstRxntLM7p/U0NjGGT3SpkPencAZeeOAeBDgjI:otA0z9fREU0NjGiCpkPycsOAeBMj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
306354997fdec66772f26aab3dd7bc40c8f780dcf11658ff954eb542d97f4f3b

Files

306354997fdec66772f26aab3dd7bc40c8f780dcf11658ff954eb542d97f4f3b
.dll regsvr32 windows:6 windows x64 arch:x64

aafbf6a5263bd7d490a9219e19c9a241

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

G:\jenkins\workspace\Git-NLEPlatformPro\Src\SymbolTable\Win\x64_Release\NLELoudnessNormalization.pdb

Imports

nlecommon

?CreateProperties@NLECommon@@YA?AVNLEPropDecorator@@XZ
?GetInterface@NLECommon@@YAJAEBU_GUID@@PEAUIUnknown@@K0PEAPEAX@Z

nlekey

?kThreadCount@Control@Codec@NLEKey@@3PEB_WEB

kernel32

GetLastError
DecodePointer
lstrlenW
QueryPerformanceCounter
IsProcessorFeaturePresent
InitializeCriticalSectionEx
GetModuleFileNameW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
OutputDebugStringW
DeleteCriticalSection
IsDebuggerPresent
EncodePointer

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegSetValueW
RegCreateKeyW
RegSetValueExW

ole32

StringFromGUID2

msvcr120

free
printf
_vsnwprintf
memmove
_unlock
_calloc_crt
__dllonexit
__C_specific_handler
pow
__CppXcptFilter
_amsg_exit
??2@YAPEAX_K@Z
_initterm
_initterm_e
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
??3@YAXPEAX@Z
_purecall
??_V@YAXPEAX@Z
system
_malloc_crt
??_U@YAPEAX_K@Z
memset
_CxxThrowException
__CxxFrameHandler3
ceilf
floorf
log10f
memcpy
_lock
_onexit

msvcp120

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAPEBDH@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aafbf6a5263bd7d490a9219e19c9a241

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

nlecommon

nlekey

kernel32

advapi32

ole32

msvcr120

msvcp120

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 180B

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 180B