svac_dec[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

svac_dec.dll
Size

1.0MB
MD5

0afa010e597a6e5e83ae4df19a00f51e
SHA1

c8414132248fd9050f104d459234b55a36c11b32
SHA256

8bd3f152f05f1bde51b92095e041b1dc0f8632f1c5282e446e61410b6f316fa1
SHA512

826ff0d04cff23df73f475c26b35712e30a1684909e344f78200bdacca3fe3c86611a1835dfd5632002a42129cd823318a9990567ece6e22a95f0ffd006dd07b
SSDEEP

12288:gJGYGmncu2+S4SiUsDUrzuOw4xSS+q8fZtW8CBY4mz9sY3IhDf92Qqnspi:gJ0+SYDmzVwM+q87WjP8H3Yfz+s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
svac_dec.dll

Files

svac_dec.dll
.dll windows:5 windows x64 arch:x64

7f660c4057386c90338be18899e377ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\svn_down\svac\svac_dec_svn\svn_dec\platform\windows\lib\x64\dll_svac_dec.pdb

Imports

kernel32

GetLastError
HeapReAlloc
HeapAlloc
HeapFree
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
DecodePointer
EncodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetModuleFileNameW
FlsGetValue
FlsFree
SetLastError
GetCurrentThread
FlsAlloc
Sleep
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryW
GetLocaleInfoW
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetStdHandle
WriteConsoleW
HeapSize
CloseHandle
CreateFileW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale

Exports

Exports

DH_SVAC_Dec_Close
DH_SVAC_Dec_DeInit
DH_SVAC_Dec_Decode
DH_SVAC_Dec_GetCPUCaps
DH_SVAC_Dec_GetVersion
DH_SVAC_Dec_Init
DH_SVAC_Dec_Open
DH_SVAC_Get_LastFrame
DH_SVAC_Set_Key

Sections

.text
Size: 898KB - Virtual size: 898KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f660c4057386c90338be18899e377ab

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 898KB - Virtual size: 898KB

.rdata Size: 88KB - Virtual size: 88KB

.data Size: 9KB - Virtual size: 22KB

.pdata Size: 15KB - Virtual size: 15KB

.idata Size: 3KB - Virtual size: 3KB

_RDATA Size: 6KB - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 898KB - Virtual size: 898KB

.rdata
Size: 88KB - Virtual size: 88KB

.data
Size: 9KB - Virtual size: 22KB

.pdata
Size: 15KB - Virtual size: 15KB

.idata
Size: 3KB - Virtual size: 3KB

_RDATA
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 5KB - Virtual size: 4KB