libvorbis[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

libvorbis.dll
Size

146KB
MD5

790edb6463c795c4be58bb8e4c2e838f
SHA1

fb35adf7fdf28cf923d194dd1089959edbf22a80
SHA256

4cc4757c8cbcaef46978c5d9e9cc836997616204cffc1c1da928ce8d7b7a5ef4
SHA512

7d01dad810b4dce774279f336887c1c615580c17faf56b370265c273c77df71e7475c69af0df175184dfa527044b112a74d28f98ec25d008f3e39b25e762e675
SSDEEP

1536:pr0YhhZdSC3MKPxgMJW83Y12F0sF9Em55zYrAsSBe92e/1Xks/SIiRaEUsXxTTl/:6+S0MKzw8Ih8x5EsEJn/MR0Ij/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
libvorbis.dll

Files

libvorbis.dll
.dll windows:5 windows x86 arch:x86

22c6f5113a71af1b57f32e3c77200547

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libogg

oggpack_readinit
oggpack_look
oggpack_adv
oggpack_read
oggpack_writeinit
oggpack_writeclear
oggpack_write
oggpack_writetrunc
oggpack_get_buffer
oggpack_reset
oggpack_bytes

msvcr100

exit
toupper
ceil
ldexp
_malloc_crt
_encoded_null
_initterm
_initterm_e
qsort
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
realloc
malloc
calloc
free
memmove
_CIsin
_CIcos
memset
floor
_CIpow
_CIlog
_CIexp
_CIsqrt
_CIatan
memcpy
_amsg_exit

kernel32

IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
IsDebuggerPresent

Exports

Exports

_floor_P
_mapping_P
_residue_P
vorbis_analysis
vorbis_analysis_blockout
vorbis_analysis_buffer
vorbis_analysis_headerout
vorbis_analysis_init
vorbis_analysis_wrote
vorbis_bitrate_addblock
vorbis_bitrate_flushpacket
vorbis_block_clear
vorbis_block_init
vorbis_comment_add
vorbis_comment_add_tag
vorbis_comment_clear
vorbis_comment_init
vorbis_comment_query
vorbis_comment_query_count
vorbis_commentheader_out
vorbis_dsp_clear
vorbis_granule_time
vorbis_info_blocksize
vorbis_info_clear
vorbis_info_init
vorbis_packet_blocksize
vorbis_synthesis
vorbis_synthesis_blockin
vorbis_synthesis_halfrate
vorbis_synthesis_halfrate_p
vorbis_synthesis_headerin
vorbis_synthesis_idheader
vorbis_synthesis_init
vorbis_synthesis_lapout
vorbis_synthesis_pcmout
vorbis_synthesis_read
vorbis_synthesis_restart
vorbis_synthesis_trackonly
vorbis_version_string
vorbis_window

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22c6f5113a71af1b57f32e3c77200547

Headers

DLL Characteristics

File Characteristics

Imports

libogg

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 81KB - Virtual size: 80KB

.rdata Size: 60KB - Virtual size: 59KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 81KB - Virtual size: 80KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 2KB - Virtual size: 2KB