045d41ce245063bf2c434e0cecc0ce2291fd7fd318df25ea4ac30f4620d144c5

Sharing

Copy URL Twitter E-mail

General

Target

045d41ce245063bf2c434e0cecc0ce2291fd7fd318df25ea4ac30f4620d144c5
Size

7.7MB
MD5

7142d78cc945186c7b0432081f594aa8
SHA1

cabcddcc6634d7d8a081d7b808da5763c0fca22a
SHA256

045d41ce245063bf2c434e0cecc0ce2291fd7fd318df25ea4ac30f4620d144c5
SHA512

16443beefc15a2c3221950ae5a1ccf19d31c517c4d7e296e07a11d4d66d28d1d5534cd00e56956b72a6f400adcc3c2ccfdc79e7f4012e563feb0de1223312aeb
SSDEEP

49152:qgtirRjO39pYXGG2GxZjZBoQ6WuEuZ3Gr56PdOZSFfooFs4uUAB1l1Tw9IOfVTNR:CROPI4fTjWIamJuwb+BZqzQG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
045d41ce245063bf2c434e0cecc0ce2291fd7fd318df25ea4ac30f4620d144c5

Files

045d41ce245063bf2c434e0cecc0ce2291fd7fd318df25ea4ac30f4620d144c5
.dll windows:6 windows x64 arch:x64

fdbb38aca5894c72f5197de5bdad59ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

G:\jenkins\workspace\Git-NLEPlatformPro\Src\SymbolTable\Win\x64_Release\LightRoomFx.pdb

Imports

opencv_core320

??1ParallelLoopBody@cv@@UEAA@XZ
?fastFree@cv@@YAXPEAX@Z
?copySize@Mat@cv@@QEAAXAEBV12@@Z
?parallel_for_@cv@@YAXAEBVRange@1@AEBVParallelLoopBody@1@N@Z
?deallocate@Mat@cv@@QEAAXXZ
?merge@cv@@YAXPEBVMat@1@_KAEBV_OutputArray@1@@Z
??Gcv@@YA?AVMatExpr@0@AEBV?$Scalar_@N@0@AEBVMat@0@@Z
??Dcv@@YA?AVMatExpr@0@AEBV10@N@Z
??Dcv@@YA?AVMatExpr@0@AEBVMat@0@N@Z
??4Mat@cv@@QEAAAEAV01@AEBV?$Scalar_@N@1@@Z
?error@cv@@YAXHAEBVString@1@PEBD1H@Z
?allocate@String@cv@@AEAAPEAD_K@Z
?split@cv@@YAXAEBVMat@1@PEAV21@@Z
?create@Mat@cv@@QEAAXHPEBHH@Z
?noArray@cv@@YAAEBV_InputOutputArray@1@XZ
?mean@cv@@YA?AV?$Scalar_@N@1@AEBV_InputArray@1@0@Z
?meanStdDev@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@10@Z
?getNumThreads@cv@@YAHXZ
?deallocate@String@cv@@AEAAXXZ
??0Mat@cv@@QEAA@AEBV01@AEBV?$Rect_@H@1@@Z
?zeros@Mat@cv@@SA?AVMatExpr@2@V?$Size_@H@2@H@Z
?zeros@Mat@cv@@SA?AVMatExpr@2@HHH@Z

opencv_imgproc320

?boundingRect@cv@@YA?AV?$Rect_@H@1@AEBV_InputArray@1@@Z
?cvtColor@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@HH@Z

nlelogger

NLEGetDefaultLogger

nlekey

?kFilterID@Filter@NLEKey@@3PEB_WEB
?kValue_Current@Property@Filter@NLEKey@@3PEB_WEB
?kDisplayType@Property@Filter@NLEKey@@3PEB_WEB
?kFilterFriendName@Filter@NLEKey@@3PEB_WEB
?kFilterGUID_ChromeKey3DLut@Filter@NLEKey@@3PEB_WEB
?kVariantName@Property@Filter@NLEKey@@3PEB_WEB
?kCount@Property@Filter@NLEKey@@3PEB_WEB
?kValue_Max@Property@Filter@NLEKey@@3PEB_WEB
?kValue_Min@Property@Filter@NLEKey@@3PEB_WEB
?kFilterGUID_AlphaChannelToBlack@Filter@NLEKey@@3PEB_WEB
?kFilterCSupport@Filter@NLEKey@@3PEB_WEB
?kValue_Default@Property@Filter@NLEKey@@3PEB_WEB
?kParamsArray@Property@Filter@NLEKey@@3PAPEB_WA
?kType@Property@Filter@NLEKey@@3PEB_WEB
?kFriendName@Property@Filter@NLEKey@@3PEB_WEB
?kFilterType@Filter@NLEKey@@3PEB_WEB

nlecommon

?GetCGDevice@NLECommon@@YA?AV?$NLEComPtr@VINLECGDevice@@@@XZ
??0NLEBlob@@QEAA@XZ
?GetInterface@NLECommon@@YAJAEBU_GUID@@PEAUIUnknown@@K0PEAPEAX@Z
?CreateProperties@NLECommon@@YA?AVNLEPropDecorator@@XZ
?CreateBGRAFrameFrom@NLECommon@@YA?AV?$NLEComPtr@VINLEFrame@@@@AEAV2@0W4NLECGMemoryType@@@Z
??1NLEBlob@@QEAA@XZ
?GetCGFilterManager@NLECommon@@YA?AV?$NLEComPtr@VINLECGFilterManager@@@@XZ

kernel32

DecodePointer
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
OutputDebugStringW

ole32

CLSIDFromString

msvcp120

??Bid@locale@std@@QEAA_KXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@H@2@@Z
?in@?$codecvt@DDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAD3AEAPEAD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@H@2@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Winerror_map@std@@YAPEBDH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_BADOFF@std@@3_JB
?id@?$ctype@D@std@@2V0locale@2@A
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?unshift@?$codecvt@DDH@std@@QEBAHAEAHPEAD1AEAPEAD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z

msvcr120

memchr
_fseeki64
fflush
fgetc
fsetpos
setvbuf
_lock_file
memcpy_s
fwrite
toupper
fclose
??8type_info@@QEBA_NAEBV0@@Z
_vswprintf_c_l
mbstowcs_s
sqrtf
calloc
realloc
ceil
floor
sin
fabs
_lock
_unlock
_calloc_crt
__dllonexit
__C_specific_handler
_onexit
?terminate@@YAXXZ
__clean_type_info_names_internal
?_name_internal_method@type_info@@QEBAPEBDPEAU__type_info_node@@@Z
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
memset
_CxxThrowException
__CxxFrameHandler3
cosf
floorf
log
logf
memcmp
memcpy
pow
powf
fgetpos
??3@YAXPEAX@Z
free
_wcsicmp
memmove
??_V@YAXPEAX@Z
_purecall
wcstombs_s
swscanf_s
setlocale
??2@YAPEAX_K@Z
malloc
wcsrchr
fputc
sscanf_s
??1bad_cast@std@@UEAA@XZ
??0bad_cast@std@@QEAA@PEBD@Z
??0bad_cast@std@@QEAA@AEBV01@@Z
??0exception@std@@QEAA@AEBV01@@Z
_unlock_file
ungetc

Exports

Exports

CreateFilterFromGUID
GetFilterCount
GetFilterProperties

Sections

.text
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IPPCODE
Size: 658KB - Virtual size: 658KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

IPPDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fdbb38aca5894c72f5197de5bdad59ae

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

opencv_core320

opencv_imgproc320

nlelogger

nlekey

nlecommon

kernel32

ole32

msvcp120

msvcr120

Exports

Exports

Sections

.text Size: 6.6MB - Virtual size: 6.6MB

IPPCODE Size: 658KB - Virtual size: 658KB

.rdata Size: 271KB - Virtual size: 271KB

.data Size: 13KB - Virtual size: 1.2MB

.pdata Size: 114KB - Virtual size: 113KB

IPPDATA Size: 4KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 6.6MB - Virtual size: 6.6MB

IPPCODE
Size: 658KB - Virtual size: 658KB

.rdata
Size: 271KB - Virtual size: 271KB

.data
Size: 13KB - Virtual size: 1.2MB

.pdata
Size: 114KB - Virtual size: 113KB

IPPDATA
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 4KB