avifil32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
avifil32.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
avifil32.dll
Resource
win10v2004-20240426-en
General
-
Target
avifil32.dll
-
Size
89KB
-
MD5
dceabba22e12cc44c2e7785c0eb9c6e3
-
SHA1
86cb15b4721f2943f671f5ab4111055a782efc70
-
SHA256
53426c4912d6f4a31f21bd438eb7421890228969a6328dea8191004ee5a07c38
-
SHA512
1f0ec9109bccf1dbeb33abf724f672901d58947747f0885441a37501f9215b52b221b31ba59e3593fb5cc967660d168063b7d6000b8fe20c56bc7c4f36da7dd4
-
SSDEEP
1536:T1pvuG7BsnpZWP+XrZMF1p7sBF37aVr+v72qe2/Sd6:T1pvjd+XryF1aB0VK2qe2M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource avifil32.dll
Files
-
avifil32.dll.dll windows:6 windows x86 arch:x86
723222780f8391503117ad7914747342
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
memset
memmove
_ftol2_sse
_vsnwprintf
??2@YAPAXI@Z
memcpy
??3@YAXPAX@Z
_purecall
_XcptFilter
malloc
mbstowcs
atoi
_except_handler4_common
_amsg_exit
_initterm
free
user32
SetRect
SetRectEmpty
IsRectEmpty
CharPrevW
DestroyWindow
GetDC
ReleaseDC
PeekMessageW
TranslateMessage
DispatchMessageW
DialogBoxParamW
IsDlgButtonChecked
GetDlgItemInt
EndDialog
MessageBoxW
LoadStringW
EnableWindow
GetDlgItem
SetDlgItemTextW
SendDlgItemMessageW
SendMessageW
CheckDlgButton
SetDlgItemInt
MessageBeep
kernel32
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
lstrcmpW
GlobalSize
WideCharToMultiByte
DisableThreadLibraryCalls
SetErrorMode
InterlockedDecrement
InterlockedIncrement
lstrlenW
GetLastError
WriteFile
ResetEvent
ReadFile
CloseHandle
CreateEventW
GetFileSize
GetDiskFreeSpaceW
GetFullPathNameW
MultiByteToWideChar
GetOverlappedResult
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalHandle
MulDiv
GlobalLock
GlobalAlloc
LocalFree
LocalAlloc
lstrlenA
CreateFileW
gdi32
CreateHalftonePalette
CreatePalette
winmm
mmioSeek
mmioWrite
mmioOpenW
mmioRead
mmioClose
advapi32
RegQueryValueExA
RegOpenKeyW
RegOpenKeyA
RegCloseKey
RegQueryValueW
RegEnumKeyW
ole32
CoGetMarshalSizeMax
CoMarshalInterface
CreateStreamOnHGlobal
CoUnmarshalInterface
CoCreateInstance
OleFlushClipboard
OleGetClipboard
OleSetClipboard
OleUninitialize
OleInitialize
CoGetMalloc
ReleaseStgMedium
msacm32
acmMetrics
acmGetVersion
acmFormatDetailsW
acmFormatTagDetailsW
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest
acmStreamClose
acmStreamUnprepareHeader
acmStreamConvert
acmFormatChooseW
msvfw32
ICCompressorChoose
ICClose
ICGetInfo
ICLocate
ICSendMessage
ICOpen
ICDecompress
ICCompress
ICGetDisplayFormat
ICCompressorFree
Exports
Exports
AVIBuildFilter
AVIBuildFilterA
AVIBuildFilterW
AVIClearClipboard
AVIFileAddRef
AVIFileCreateStream
AVIFileCreateStreamA
AVIFileCreateStreamW
AVIFileEndRecord
AVIFileExit
AVIFileGetStream
AVIFileInfo
AVIFileInfoA
AVIFileInfoW
AVIFileInit
AVIFileOpen
AVIFileOpenA
AVIFileOpenW
AVIFileReadData
AVIFileRelease
AVIFileWriteData
AVIGetFromClipboard
AVIMakeCompressedStream
AVIMakeFileFromStreams
AVIMakeStreamFromClipboard
AVIPutFileOnClipboard
AVISave
AVISaveA
AVISaveOptions
AVISaveOptionsFree
AVISaveV
AVISaveVA
AVISaveVW
AVISaveW
AVIStreamAddRef
AVIStreamBeginStreaming
AVIStreamCreate
AVIStreamEndStreaming
AVIStreamFindSample
AVIStreamGetFrame
AVIStreamGetFrameClose
AVIStreamGetFrameOpen
AVIStreamInfo
AVIStreamInfoA
AVIStreamInfoW
AVIStreamLength
AVIStreamOpenFromFile
AVIStreamOpenFromFileA
AVIStreamOpenFromFileW
AVIStreamRead
AVIStreamReadData
AVIStreamReadFormat
AVIStreamRelease
AVIStreamSampleToTime
AVIStreamSetFormat
AVIStreamStart
AVIStreamTimeToSample
AVIStreamWrite
AVIStreamWriteData
CreateEditableStream
DllCanUnloadNow
DllGetClassObject
EditStreamClone
EditStreamCopy
EditStreamCut
EditStreamPaste
EditStreamSetInfo
EditStreamSetInfoA
EditStreamSetInfoW
EditStreamSetName
EditStreamSetNameA
EditStreamSetNameW
IID_IAVIEditStream
IID_IAVIFile
IID_IAVIStream
IID_IGetFrame
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ