d:\Nokia\HaliMediaSplitter_Integration Work\v2_39_0_chk out\NokiaPCFilters\tech\code\filters\audio_dec\amrnbdmo\bin\EmzAMRNBDec.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8c169d1f46d254ee85bbb459fb2a75d7551bd8347db7b733e4b218905f8e190a.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8c169d1f46d254ee85bbb459fb2a75d7551bd8347db7b733e4b218905f8e190a.dll
Resource
win10v2004-20240226-en
General
-
Target
8c169d1f46d254ee85bbb459fb2a75d7551bd8347db7b733e4b218905f8e190a
-
Size
204KB
-
MD5
3c68a8ff16ae2a2b58b430406dd20503
-
SHA1
5e0201c8cd2315ac2a8666e3128d93376f2a5f58
-
SHA256
8c169d1f46d254ee85bbb459fb2a75d7551bd8347db7b733e4b218905f8e190a
-
SHA512
93970023c1395537da7a97f2d31745daa375a689b55b5eecd243d3445c8d91719d72e667dfb03b3194706965acd305cb5d922518e0023e89c36570e0a1c978c7
-
SSDEEP
3072:Wims1Qe6pXHbkpzHC4+I5Rrvx/RbrL1JUty3YS72+:WinQdX7cDC4L53Rb1JP3f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c169d1f46d254ee85bbb459fb2a75d7551bd8347db7b733e4b218905f8e190a
Files
-
8c169d1f46d254ee85bbb459fb2a75d7551bd8347db7b733e4b218905f8e190a.dll regsvr32 windows:4 windows x86 arch:x86
22024f906cb2367c78ca2d70519482c5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msdmo
MoInitMediaType
MoCopyMediaType
MoFreeMediaType
DMOUnregister
DMORegister
kernel32
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
EnterCriticalSection
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
FlushFileBuffers
GetConsoleMode
RaiseException
lstrlenW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
MultiByteToWideChar
VirtualAlloc
GetConsoleCP
SetFilePointer
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
VirtualFree
CreateFileA
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetCPInfo
GetOEMCP
user32
CharNextW
UnregisterClassA
advapi32
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
ole32
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
oleaut32
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ