d692c990aab305eef2e6d59d54e200a1

Sharing

Copy URL Twitter E-mail

General

Target

d692c990aab305eef2e6d59d54e200a1
Size

1.0MB
MD5

d692c990aab305eef2e6d59d54e200a1
SHA1

5978a6c862c88d8a2f38d8693e9234981e03c87c
SHA256

29be975be791d46ad428bd9006725e55af8e30186ca75705e78030631352af74
SHA512

a7d952622c42430cf309e325cf125a5f4c57744c276deb9e12b3b287d4bce72ff4dce9d8bb8f7442a2bb4ad357d89789bd80ec5fa8ad464e2a5e57dd0c396e38
SSDEEP

24576:uQS3JTXIYxpA79Dit9GVoAsGpjsCfMtdNdqohyMAqUUoEjA4:uQSZ8Yx8Dij8vpjsCfErQaAqJA4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d692c990aab305eef2e6d59d54e200a1

Files

d692c990aab305eef2e6d59d54e200a1
.dll windows:4 windows x86 arch:x86

607385fb2c24a336279d585ddabfa7af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

block_Alloc
config_ChainParse
msg_Generic
us_atof
var_GetChecked
vlc_CPU
vlc_plugin_set
vlc_ureduce

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentThread
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReleaseSemaphore
SetEvent
SetThreadPriority
Sleep
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

_fstat
_ftime
_strdup
_unlink
__dllonexit
__lc_codepage
__mb_cur_max
_assert
_beginthreadex
_errno
_filelengthi64
_iob
_stricmp
_strnicmp
abort
atoi
calloc
fclose
fflush
fgetc
fgetpos
fopen
fprintf
fputc
fread
free
fsetpos
fwrite
getenv
gmtime
localeconv
localtime
malloc
memchr
memcpy
memmove
memset
pow
realloc
rename
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncmp
strpbrk
strspn
strstr
strtok
strtol
toupper
vfprintf
wcslen

Exports

Exports

vlc_entry__1_1_0g
vlc_entry_copyright__1_1_0g
vlc_entry_license__1_1_0g

Sections

.text
Size: 944KB - Virtual size: 944KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 119KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gnu_deb
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

607385fb2c24a336279d585ddabfa7af

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 944KB - Virtual size: 944KB

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 43KB - Virtual size: 43KB

.rodata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 119KB

.edata Size: 512B - Virtual size: 161B

.idata Size: 2KB - Virtual size: 2KB

.reloc Size: 14KB - Virtual size: 14KB

.gnu_deb Size: 56KB - Virtual size: 56KB

.text
Size: 944KB - Virtual size: 944KB

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 43KB - Virtual size: 43KB

.rodata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 119KB

.edata
Size: 512B - Virtual size: 161B

.idata
Size: 2KB - Virtual size: 2KB

.reloc
Size: 14KB - Virtual size: 14KB

.gnu_deb
Size: 56KB - Virtual size: 56KB