725a38e97e09e360f6071cca9e09378a34efcb0569fce21f08161f0abb35cdd1

Sharing

Copy URL Twitter E-mail

General

Target

725a38e97e09e360f6071cca9e09378a34efcb0569fce21f08161f0abb35cdd1
Size

208KB
MD5

52e450c26b1af35cd95d5eed1d4f4ebd
SHA1

4cfa1b47653f1d463164cc3cf0cb7d91d13f63fe
SHA256

725a38e97e09e360f6071cca9e09378a34efcb0569fce21f08161f0abb35cdd1
SHA512

0aca2cd93b34dff1fe4b07d3200481cd34aaa1d5b7b3eb7b6a89e0e4fd135c832ee60719627088b093e78d7d845fc1b2b74681cc72cf1ed4a11aab2c25ab566a
SSDEEP

6144:JyuyhsAXMK55bMl/IJYDq7qxUc0kxcTId59lsaTQ:kuyhsAP55RJYDq7qxUcWT49U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
725a38e97e09e360f6071cca9e09378a34efcb0569fce21f08161f0abb35cdd1

Files

725a38e97e09e360f6071cca9e09378a34efcb0569fce21f08161f0abb35cdd1
.dll windows:6 windows x86 arch:x86

121812423f5afd4ed953dbe6540ed792

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\projects\repos\cerbero.git\1.22\build\sources\msvc_x86\libtheora-1.1.1\_builddir\lib\theora-0.pdb

Imports

libogg-0

oggpackB_writeinit
oggpackB_writeclear
oggpackB_get_buffer
oggpackB_bytes
oggpackB_write
oggpackB_reset
oggpack_write
oggpack_writeclear

vcruntime140

_except_handler4_common
memset
memmove
__std_type_info_destroy_list
__current_exception
__current_exception_context
memcpy

api-ms-win-crt-heap-l1-1-0

free
malloc
calloc
realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

toupper

api-ms-win-crt-math-l1-1-0

_except1

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_execute_onexit_table
_crt_atexit
_initialize_onexit_table
_cexit
terminate
_seh_filter_dll
_initterm_e
_initterm
_crt_at_quick_exit
_configure_narrow_argv
_initialize_narrow_environment

kernel32

UnhandledExceptionFilter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter

Exports

Exports

th_comment_add
th_comment_add_tag
th_comment_clear
th_comment_init
th_comment_query
th_comment_query_count
th_decode_alloc
th_decode_ctl
th_decode_free
th_decode_headerin
th_decode_packetin
th_decode_ycbcr_out
th_encode_alloc
th_encode_ctl
th_encode_flushheader
th_encode_free
th_encode_packetout
th_encode_ycbcr_in
th_granule_frame
th_granule_time
th_info_clear
th_info_init
th_packet_isheader
th_packet_iskeyframe
th_setup_free
th_version_number
th_version_string
theora_clear
theora_comment_add
theora_comment_add_tag
theora_comment_clear
theora_comment_init
theora_comment_query
theora_comment_query_count
theora_control
theora_decode_YUVout
theora_decode_header
theora_decode_init
theora_decode_packetin
theora_encode_YUVin
theora_encode_comment
theora_encode_header
theora_encode_init
theora_encode_packetout
theora_encode_tables
theora_granule_frame
theora_granule_shift
theora_granule_time
theora_info_clear
theora_info_init
theora_packet_isheader
theora_packet_iskeyframe
theora_version_number
theora_version_string

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

121812423f5afd4ed953dbe6540ed792

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libogg-0

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 138KB - Virtual size: 137KB

.rdata Size: 66KB - Virtual size: 65KB

.data Size: 512B - Virtual size: 976B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 138KB - Virtual size: 137KB

.rdata
Size: 66KB - Virtual size: 65KB

.data
Size: 512B - Virtual size: 976B

.reloc
Size: 2KB - Virtual size: 2KB