b51087fb41c3ad854c3bf07d1ba83c03355b5702ae056d71cab75f4f2e6e35cc

Sharing

Copy URL Twitter E-mail

General

Target

b51087fb41c3ad854c3bf07d1ba83c03355b5702ae056d71cab75f4f2e6e35cc
Size

40KB
MD5

5b77d359f6984c2fee31435c35864577
SHA1

be331614e7d7ad110b6ea6bf522bccb5ca27d5eb
SHA256

b51087fb41c3ad854c3bf07d1ba83c03355b5702ae056d71cab75f4f2e6e35cc
SHA512

77ed547b1b000568eff6833f8e531e3e32d463451d52bbe9ca266cbd3fe7200dcf09fe3329ceb370ca1934da141be57ff7fc60ae92dda68a83c74f4b7b1216ac
SSDEEP

768:lNebOq3l8aerFjIcqTw3CAZEhbyjyw8FBV8ZtnIVQaBOATEpm:lfS8aHcEbkrIVQAOATEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b51087fb41c3ad854c3bf07d1ba83c03355b5702ae056d71cab75f4f2e6e35cc

Files

b51087fb41c3ad854c3bf07d1ba83c03355b5702ae056d71cab75f4f2e6e35cc
.dll windows:6 windows x64 arch:x64

e7ca9a85f872fefed51c20a827f8f0f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

G:\jenkins\workspace\Git-NLEPlatformPro\Src\SymbolTable\Win\x64_Release\NLEHolePunchingLib.pdb

Imports

opencv_core320

?fastFree@cv@@YAXPEAX@Z
?copySize@Mat@cv@@QEAAXAEBV12@@Z
?error@cv@@YAXHAEBVString@1@PEBD1H@Z
?merge@cv@@YAXPEBVMat@1@_KAEBV_OutputArray@1@@Z
??Gcv@@YA?AVMatExpr@0@AEBV?$Scalar_@N@0@AEBVMat@0@@Z
??Dcv@@YA?AVMatExpr@0@AEBV10@N@Z
?allocate@String@cv@@AEAAPEAD_K@Z
??4Mat@cv@@QEAAAEAV01@AEBV?$Scalar_@N@1@@Z
?zeros@Mat@cv@@SA?AVMatExpr@2@V?$Size_@H@2@H@Z
?zeros@Mat@cv@@SA?AVMatExpr@2@HHH@Z
?create@Mat@cv@@QEAAXHPEBHH@Z
?deallocate@Mat@cv@@QEAAXXZ
?deallocate@String@cv@@AEAAXXZ

opencv_imgproc320

?cvtColor@cv@@YAXAEBV_InputArray@1@AEBV_OutputArray@1@HH@Z

nlelogger

NLEGetDefaultLogger

msvcp120

?_Winerror_map@std@@YAPEBDH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?uncaught_exception@std@@YA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

msvcr120

__crtCapturePreviousContext
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
_CxxThrowException
__CxxFrameHandler3
floorf
memcpy
memset
memmove
wcsrchr
??_V@YAXPEAX@Z
_purecall
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
_lock
_unlock
_calloc_crt
__dllonexit
__C_specific_handler
_onexit
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess

kernel32

GetSystemTimeAsFileTime
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
DisableThreadLibraryCalls
EncodePointer
GetCurrentThreadId
GetCurrentProcessId

Exports

Exports

??0get3dlutConstrastOffset@@QEAA@XZ
??1get3dlutConstrastOffset@@QEAA@XZ
??4get3dlutConstrastOffset@@QEAAAEAV0@AEBV0@@Z
?__autoclassinit2@NLEBlob@@QEAAX_K@Z
?getConstartAndOffset@get3dlutConstrastOffset@@QEAAXEEENN@Z
?getconstrast@get3dlutConstrastOffset@@QEAANXZ
?getoffset@get3dlutConstrastOffset@@QEAANXZ

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7ca9a85f872fefed51c20a827f8f0f8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

opencv_core320

opencv_imgproc320

nlelogger

msvcp120

msvcr120

kernel32

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 1024B - Virtual size: 984B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 428B

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 1024B - Virtual size: 984B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 428B