2317d3e14ab214f06ae38a729524646971e21b398eda15cc9deb8b00b231abc3

Sharing

Copy URL Twitter E-mail

General

Target

2317d3e14ab214f06ae38a729524646971e21b398eda15cc9deb8b00b231abc3
Size

99KB
MD5

bdd548819f74096d2de4a468f987b1f3
SHA1

d8b631c551845f892ebb5e7d09991f6c9d4facad
SHA256

2317d3e14ab214f06ae38a729524646971e21b398eda15cc9deb8b00b231abc3
SHA512

d442d61244ec02bb8583c9359feff13196250785f5ab329df1a34a9a3ab61f76b4209580163984bd01628c2df51003b2c65b26c7a81d26faebe36827065c72f1
SSDEEP

1536:eDkuGzBdvIxCR3kl05A0yH9Gc3Kp3TLYJylu8FUkqEmNqIY5dmv7Cz:e7GzTR0q5ARhap3TsJMuc8fNrY58v7C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2317d3e14ab214f06ae38a729524646971e21b398eda15cc9deb8b00b231abc3

Files

2317d3e14ab214f06ae38a729524646971e21b398eda15cc9deb8b00b231abc3
.dll windows:5 windows x64 arch:x64

2550873a74f108f54ef426f3df09bfc7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
VirtualProtect
UnmapViewOfFile
SetEvent
GetProcAddress
GetModuleHandleW
CreateRemoteThread
_lcreat
_lwrite
FlushFileBuffers
HeapReAlloc
GetStringTypeW
LCMapStringW
MultiByteToWideChar
WriteConsoleW
SetFilePointer
HeapSize
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapAlloc
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
GetFileType
SetStdHandle
RtlUnwindEx
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
GetModuleFileNameW
MapViewOfFile
CreateFileMappingA
CreateFileA
WaitForSingleObject
CreateThread
CreateEventA
Sleep
GetSystemDirectoryA
GetVersionExA
GetModuleFileNameA
GlobalAlloc
GetFileTime
GetFileSize
CreateFileW
CloseHandle
WriteProcessMemory
VirtualAllocEx
OpenProcess
CreateProcessA
ExitProcess
lstrcatA
LocalFree
_llseek
_lclose
_lread
lstrcpyA
lstrlenA
OpenFile
LocalAlloc
GlobalUnlock
GlobalFree
GlobalLock
GetStartupInfoW
GetStdHandle
WriteFile
FlsAlloc
SetLastError
FlsFree
GetSystemTimeAsFileTime
GetLastError
HeapFree
DecodePointer
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
FlsGetValue

user32

EnableWindow
MessageBoxA
CreateWindowExA
DialogBoxIndirectParamA
SetCursor
DestroyMenu
LoadMenuIndirectA
MoveWindow
PostQuitMessage
PostMessageA
DialogBoxParamA
SetFocus
GetDlgItem
GetMessageA
ShowWindow
RegisterClassA
LoadCursorA
LoadIconA
CreateCursor
DestroyCursor
CreateIcon
DestroyIcon
EndDialog
DrawIcon
SetWindowPos
GetSystemMetrics
SetWindowTextA
UpdateWindow
InvalidateRect
wsprintfA
SendMessageA
ReleaseDC
GetDC
DefWindowProcA
EndPaint
GetClientRect
BeginPaint
DispatchMessageA
TranslateMessage
PeekMessageA
IsWindow

gdi32

GetTextMetricsA
GetStockObject
GetBitmapBits
GetObjectA
StretchBlt
SetStretchBltMode
CreateBitmap
SetDIBits
CreateCompatibleBitmap
CreatePalette
CreateDIBitmap
RealizePalette
SelectPalette
DeleteObject
TextOutA
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
PatBlt

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

CloseServiceHandle
StartServiceA
ChangeServiceConfig2A
CreateServiceA
OpenSCManagerA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus

Exports

Exports

libvlc_add_intf
libvlc_new
libvlc_playlist_play
libvlc_release
libvlc_set_app_id
libvlc_set_user_agent
libvlc_wait

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2550873a74f108f54ef426f3df09bfc7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: 62KB - Virtual size: 62KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 5KB - Virtual size: 17KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 956B

.text
Size: 62KB - Virtual size: 62KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 5KB - Virtual size: 17KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 956B