x:\kadun\build\bin\m64x86\h264declib.pdb
Static task
static1
Behavioral task
behavioral1
Sample
h264dec.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
h264dec.dll
Resource
win10v2004-20240508-en
General
-
Target
h264dec.dll
-
Size
1.1MB
-
MD5
2254e24d11b64ba30a46c49e177db79d
-
SHA1
6de132b2aa115dadf2cd9b0d56e8ae66023a5fd9
-
SHA256
8038cedb7ee768d7d7985107b48dbde5daf83f7a5173bbbf81980f3c05308c36
-
SHA512
d1b2144c72cdeed25b1960f1ce7e113e644c61a79a269012b256e09d229a3fec51577801c440167389c3d624d43bf1d50610e57727045f70208b6ae8593530a4
-
SSDEEP
12288:G4J76V6uyepCySvdGTjoJ2y6sd0KrL9/KW+viN31OQ7zKUFRejGd8jOkxMYyp5Xe:xLJ2oVFd0KH9/KW+v+r7zzWn3Y5X+I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource h264dec.dll
Files
-
h264dec.dll.dll windows:5 windows x64 arch:x64
f95f5e05deab2bf33bc22f3aec00f813
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WaitForSingleObject
DeleteCriticalSection
CreateEventA
CreateSemaphoreA
ResetEvent
ReleaseSemaphore
SetEvent
GetProcAddress
GetModuleHandleA
GetProcessAffinityMask
GetCurrentProcess
MultiByteToWideChar
GetConsoleScreenBufferInfo
GetStdHandle
SetConsoleTextAttribute
Sleep
ExitThread
GetCurrentThreadId
GetLastError
CreateThread
GetDateFormatA
GetTimeFormatA
GetFileType
CreateFileA
CreateFileW
HeapAlloc
HeapReAlloc
HeapFree
FlsSetValue
GetCommandLineA
GetModuleHandleW
ExitProcess
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
TerminateProcess
SetConsoleCtrlHandler
RtlUnwindEx
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
FatalAppExitA
FlsGetValue
FlsFree
SetLastError
GetCurrentThread
FlsAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
GetTimeZoneInformation
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
GetModuleFileNameW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
LoadLibraryW
GetLocaleInfoW
FlushFileBuffers
LCMapStringW
GetStringTypeW
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
RaiseException
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapSize
Exports
Exports
H264_Dec_Close
H264_Dec_DeInit
H264_Dec_Decode
H264_Dec_GetCPUCaps
H264_Dec_GetInfo
H264_Dec_Init
H264_Dec_Open
Sections
.text Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 1024B - Virtual size: 875B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ