8b959721ebe9c8e60dce03fa975acffac3f7592dee4dc4404b4655d510cf97df

Sharing

Copy URL

Twitter E-mail

General

Target

8b959721ebe9c8e60dce03fa975acffac3f7592dee4dc4404b4655d510cf97df
Size

121KB
MD5

0832903e0be26d04022ef84513ad1a74
SHA1

fe918a7e3b9b71d27e427b7389297ffe84fe3ed3
SHA256

8b959721ebe9c8e60dce03fa975acffac3f7592dee4dc4404b4655d510cf97df
SHA512

0b8cbf7bdabba7d138d15797a1f83c9712f23b0aa13cadee0b14849e4930b1da349ed0ff5114d9546a23ca1690c96cfd010a093ef1ae17a9cb8db290c461d145
SSDEEP

3072:LM04gnCl3IHfLouOiuIuZxLMzwrgV5pokH5GIADJ9bWh:LM0KutOKwrg7pokH5g3b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b959721ebe9c8e60dce03fa975acffac3f7592dee4dc4404b4655d510cf97df

Files

8b959721ebe9c8e60dce03fa975acffac3f7592dee4dc4404b4655d510cf97df
.dll windows:6 windows x86 arch:x86

17dce604559de6b11058bedf121363a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\projects\repos\cerbero.git\build\sources\msvc_x86\gst-plugins-good-1.0-1.22.0\_builddir\gst\flv\gstflv.pdb

Imports

gstpbutils-1.0-0

gst_codec_utils_aac_get_sample_rate_from_index
gst_codec_utils_aac_get_channels
gst_pb_utils_get_codec_description

gstvideo-1.0-0

gst_video_guess_framerate

gstaudio-1.0-0

gst_audio_format_build_integer
gst_audio_format_to_string
gst_audio_info_from_caps

gstbase-1.0-0

gst_aggregator_simple_get_next_time
gst_adapter_new
gst_adapter_clear
gst_adapter_push
gst_adapter_flush
gst_adapter_take
gst_adapter_take_buffer
gst_adapter_available
gst_flow_combiner_new
gst_flow_combiner_free
gst_flow_combiner_update_pad_flow
gst_flow_combiner_add_pad
gst_flow_combiner_remove_pad
gst_flow_combiner_reset
gst_byte_writer_init_with_size
gst_byte_writer_reset_and_get_buffer
gst_aggregator_pad_get_type
gst_aggregator_pad_pop_buffer
gst_aggregator_pad_peek_buffer
gst_aggregator_pad_has_buffer
gst_aggregator_pad_is_eos
gst_aggregator_finish_buffer
gst_aggregator_set_src_caps
gst_aggregator_get_type

gstreamer-1.0-0

gst_structure_set_value
gst_structure_get_value
gst_memory_new_wrapped
gst_structure_get_int
gst_structure_get_string
gst_structure_get_fraction
gst_buffer_new
gst_buffer_append_memory
gst_buffer_memcmp
gst_buffer_append
gst_iterator_next
gst_iterator_resync
gst_iterator_free
gst_segment_to_running_time
gst_segment_to_running_time_full
gst_tag_list_n_tags
gst_tag_list_nth_tag_name
gst_tag_list_get_uint
gst_tag_list_get_uint64
gst_tag_list_get_string
gst_event_parse_caps
gst_event_parse_tag
gst_element_class_add_static_pad_template_with_gtype
gst_element_iterate_sink_pads
gst_element_foreach_sink_pad
_gst_debug_category_new
gst_tag_setter_get_type
gst_tag_setter_reset_tags
gst_tag_setter_merge_tags
gst_tag_setter_get_tag_list
gst_tag_setter_set_tag_merge_mode
gst_tag_setter_get_tag_merge_mode
gst_util_fraction_to_double
gst_type_mark_as_plugin_api
gst_plugin_register_static
gst_structure_get_name
gst_object_replace
_gst_fraction_type
_gst_value_array_type
_gst_debug_min
_gst_buffer_type
gst_pad_create_stream_id
gst_pad_peer_query_duration
gst_pad_use_fixed_caps
gst_util_group_id_next
gst_util_seqnum_next
gst_value_array_append_value
_gst_debug_register_funcptr
gst_debug_log
gst_stream_error_quark
gst_element_message_full_with_details
gst_element_message_full
_gst_element_error_printf
gst_element_post_message
gst_element_no_more_pads
gst_element_remove_pad
gst_element_add_pad
gst_element_get_type
gst_element_class_set_static_metadata
gst_element_class_get_pad_template
gst_element_class_add_static_pad_template
gst_make_element_message_details
gst_element_register
gst_pad_query_default
gst_pad_set_query_function_full
gst_pad_peer_query
gst_pad_stop_task
gst_pad_pause_task
gst_pad_start_task
gst_pad_send_event
gst_pad_event_default
gst_pad_push_event
gst_pad_pull_range
gst_pad_push
gst_pad_get_current_caps
gst_pad_set_event_function_full
gst_pad_set_chain_function_full
gst_pad_set_activatemode_function_full
gst_pad_set_activate_function_full
gst_pad_get_sticky_event
gst_pad_activate_mode
gst_pad_set_active
gst_pad_new_from_static_template
gst_pad_new_from_template
gst_pad_get_type
gst_flow_get_name
gst_event_new_segment_done
gst_event_parse_seek
gst_event_new_seek
gst_event_new_tag
gst_event_copy_segment
gst_event_new_segment
gst_event_new_caps
gst_event_new_gap
gst_event_new_eos
gst_event_new_stream_collection
gst_event_new_flush_stop
gst_event_new_flush_start
gst_event_parse_group_id
gst_event_set_group_id
gst_event_set_stream
gst_event_parse_stream_start
gst_event_new_stream_start
gst_event_set_seqnum
gst_event_get_seqnum
gst_event_type_get_name
gst_message_new_stream_collection
gst_message_new_segment_done
gst_message_new_segment_start
gst_message_set_seqnum
gst_stream_collection_add_stream
gst_stream_collection_new
gst_stream_set_tags
gst_stream_new
gst_query_set_bitrate
gst_query_has_scheduling_mode_with_flags
gst_query_new_scheduling
gst_object_get_type
gst_object_get_name
gst_query_parse_seeking
gst_query_set_seeking
gst_query_new_seeking
gst_query_set_segment
gst_query_parse_duration
gst_query_set_duration
gst_query_parse_position
gst_query_set_position
gst_tag_list_add
gst_tag_list_set_scope
gst_tag_list_new_empty
gst_segment_do_seek
gst_segment_to_stream_time
gst_segment_init
gst_buffer_copy_region
gst_buffer_unmap
gst_buffer_map
gst_buffer_get_size
gst_caps_is_equal
gst_caps_is_fixed
gst_caps_set_simple
gst_caps_get_structure
gst_caps_new_simple
gst_caps_new_empty_simple
gst_structure_take_value
gst_date_time_unref
gst_date_time_new
gst_mini_object_replace
gst_mini_object_copy
gst_mini_object_unref
gst_mini_object_ref
gst_object_get_path_string
gst_object_unref
gst_object_ref
gst_object_get_parent
gst_structure_has_field

gobject-2.0-0

g_type_class_peek_parent
g_type_register_static_simple
g_type_class_adjust_private_offset
g_type_check_instance_is_a
g_value_init
g_value_unset
g_signal_new
g_signal_emit
g_value_take_boxed
g_boxed_type_register_static
g_object_class_install_property
g_object_new
g_object_unref
g_value_set_enum
g_value_get_enum
g_enum_register_static
g_param_spec_enum
g_type_add_interface_static
g_value_reset
g_value_set_boxed
g_value_get_boxed
g_object_notify
g_value_get_object
g_param_spec_boolean
g_param_spec_string
g_value_set_boolean
g_value_get_boolean
g_value_set_string
g_value_get_string
g_value_dup_string
g_type_name

glib-2.0-0

g_mutex_lock
g_intern_static_string
g_once_init_leave
g_array_free
g_array_new
g_hash_table_new
g_free
g_mutex_unlock
g_rec_mutex_lock
g_rec_mutex_unlock
g_slice_free1
g_slice_alloc0
g_slice_alloc
g_return_if_fail_warning
g_log
g_utf8_validate
g_int_hash
g_int_equal
g_hash_table_foreach
g_hash_table_lookup
g_hash_table_insert
g_hash_table_destroy
g_ascii_strtoull
g_once_init_enter
g_list_foreach
g_list_find
g_list_prepend
g_list_free
g_try_realloc
g_array_append_vals
g_try_malloc0
g_strchug
g_get_real_time
g_list_length
g_list_reverse
g_malloc
g_tree_search
g_tree_insert
g_tree_destroy
g_tree_new_with_data
g_assertion_message_expr
g_strv_length
g_strfreev
g_strsplit
g_memdup2
g_strdup_printf
g_strdup
g_strchomp

gsttag-1.0-0

gst_tag_list_to_vorbiscomment_buffer

vcruntime140

memcpy
__std_type_info_destroy_list
__current_exception
__current_exception_context
_except_handler4_common
memset

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf

api-ms-win-crt-time-l1-1-0

_gmtime64

api-ms-win-crt-math-l1-1-0

_except1

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initterm
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initialize_onexit_table

kernel32

DisableThreadLibraryCalls
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead

Exports

Exports

gst_plugin_flv_get_desc
gst_plugin_flv_register

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17dce604559de6b11058bedf121363a2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gstpbutils-1.0-0

gstvideo-1.0-0

gstaudio-1.0-0

gstbase-1.0-0

gstreamer-1.0-0

gobject-2.0-0

glib-2.0-0

gsttag-1.0-0

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 84KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 84KB - Virtual size: 84KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 7KB