da178533edb16b2344de2d453d0d91c4

Sharing

Copy URL Twitter E-mail

General

Target

da178533edb16b2344de2d453d0d91c4
Size

138KB
MD5

da178533edb16b2344de2d453d0d91c4
SHA1

aa9aa5ae3ed1fab8a521059056b006bfadc16eb7
SHA256

a4a5fc79f44dbf5d2437f27cbaf134278e00baded0d110f11796fb1087a271c2
SHA512

ab0d39cd8cae8261e9268a68071e0dae47f5399e2587e74c4781172a177d46500bf3b2f08925c9fc6d091513aa62b00090bf8b5bda73d0e39406722795342f65
SSDEEP

3072:xQyiCra1vDjgI3801a+0KiXc6u5Fv77AtyHMke7AtyHMkK3a6Xa6s1Ffqce6ifPQ:xQyzEgIh1gsn7AtyHMke7AtyHMkkgfqC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da178533edb16b2344de2d453d0d91c4

Files

da178533edb16b2344de2d453d0d91c4
.dll windows:6 windows x86 arch:x86

0a4441ffa7da9d2fe4d51f2ed0fcf04f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\651dcee5\1\BC\public\linphone-sdk\build-desktop\WORK\desktop\Build\speex\libspeex\RelWithDebInfo\speex.pdb

Imports

vcruntime140_app

memcpy
memset
__std_type_info_destroy_list
_except_handler4_common
memmove

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

free
realloc
calloc

api-ms-win-crt-math-l1-1-0

_libm_sse2_log_precise
floor
_libm_sse2_pow_precise
_libm_sse2_acos_precise
_libm_sse2_exp_precise
_libm_sse2_sqrt_precise

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initterm_e
_initterm
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
exit
_initialize_narrow_environment
_seh_filter_dll
_configure_narrow_argv
_register_onexit_function

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-winrt-l1-1-0

RoInitialize

Exports

Exports

speex_bits_advance
speex_bits_destroy
speex_bits_init
speex_bits_init_buffer
speex_bits_insert_terminator
speex_bits_nbytes
speex_bits_pack
speex_bits_peek
speex_bits_peek_unsigned
speex_bits_read_from
speex_bits_read_whole_bytes
speex_bits_remaining
speex_bits_reset
speex_bits_rewind
speex_bits_set_bit_buffer
speex_bits_unpack_signed
speex_bits_unpack_unsigned
speex_bits_write
speex_bits_write_whole_bytes
speex_decode
speex_decode_int
speex_decode_stereo
speex_decode_stereo_int
speex_decoder_ctl
speex_decoder_destroy
speex_decoder_init
speex_default_user_handler
speex_encode
speex_encode_int
speex_encode_stereo
speex_encode_stereo_int
speex_encoder_ctl
speex_encoder_destroy
speex_encoder_init
speex_header_to_packet
speex_inband_handler
speex_init_header
speex_lib_get_mode
speex_mode_query
speex_packet_to_header
speex_std_char_handler
speex_std_enh_request_handler
speex_std_high_mode_request_handler
speex_std_low_mode_request_handler
speex_std_mode_request_handler
speex_std_stereo_request_handler
speex_std_vbr_quality_request_handler
speex_std_vbr_request_handler
speex_stereo_state_destroy
speex_stereo_state_init
speex_stereo_state_reset

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a4441ffa7da9d2fe4d51f2ed0fcf04f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140_app

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-winrt-l1-1-0

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 104KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 3KB

.00cfg Size: 512B - Virtual size: 260B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 104KB - Virtual size: 104KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 3KB

.00cfg
Size: 512B - Virtual size: 260B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB