323c3beea9cfe11b3932bd1cf6073016d971e4060273aa34ea2878931a263ae1

Sharing

Copy URL

Twitter E-mail

General

Target

323c3beea9cfe11b3932bd1cf6073016d971e4060273aa34ea2878931a263ae1
Size

1.6MB
MD5

60feb643137b07c5dd30170a8ea1fcce
SHA1

e3310daa26c618817609434e4a70a2a24927ef5d
SHA256

323c3beea9cfe11b3932bd1cf6073016d971e4060273aa34ea2878931a263ae1
SHA512

e1d5b20f7e41015dfa3df0b1102f0fa41894164e4c8c2e8927927b9b6831d3829f118e56b1fe9614dbc69fafd79112883fd2e8d3737449b8a086ee4d9da039be
SSDEEP

24576:LG9CWvdVuJ8Z3o+npqwfWVfCl8KupGavkg3NyISbbTtYIBAUZLYjLDH:K9nvd0SNp7uA8KupGaXnQYIBAUZLYf7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
323c3beea9cfe11b3932bd1cf6073016d971e4060273aa34ea2878931a263ae1

Files

323c3beea9cfe11b3932bd1cf6073016d971e4060273aa34ea2878931a263ae1
.dll windows:4 windows x64 arch:x64

ef6f73bc1c4023062bd0d2aa8747983a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libvlccore

decoder_NewSubpicture
subpicture_Delete
subpicture_region_New
text_segment_ChainDelete
text_segment_Copy
text_segment_New
text_style_Create
text_style_Delete
text_style_Duplicate
text_style_Merge
var_AddCallback
var_Create
var_DelCallback
var_GetChecked
var_SetChecked
vlc_Log
vlc_mutex_destroy
vlc_mutex_init
vlc_mutex_lock
vlc_mutex_unlock

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
MultiByteToWideChar
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte

msvcrt

__C_specific_handler
___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
__setusermatherr
_amsg_exit
_beginthreadex
_endthreadex
_errno
_exit
_initterm
_lock
_onexit
_setjmp
_stat64
_stricmp
_strnicmp
_ultoa
_unlock
_vsnprintf
abort
atof
calloc
clearerr
exit
fclose
ferror
fflush
fgetwc
fopen
fprintf
fputc
fread
free
frexp
fwprintf
fwrite
getc
getenv
gmtime
isalnum
isspace
isxdigit
localeconv
malloc
memcmp
memcpy
memmove
memset
mktime
printf
putchar
puts
qsort
raise
realloc
remove
setlocale
signal
sprintf
strchr
strcmp
strerror
strlen
strncat
strncmp
strrchr
strtol
strtoul
tolower
vfprintf
wcscpy
wcslen
_vsnwprintf
_snwprintf
longjmp
_write
_unlink
_strdup
_open
_close

user32

MessageBoxW

Exports

Exports

vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f

Sections

.text
Size: 613KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 945KB - Virtual size: 944KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef6f73bc1c4023062bd0d2aa8747983a

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

advapi32

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 613KB - Virtual size: 612KB

.data Size: 43KB - Virtual size: 43KB

.rdata Size: 945KB - Virtual size: 944KB

.pdata Size: 20KB - Virtual size: 20KB

.xdata Size: 19KB - Virtual size: 19KB

.bss Size: - Virtual size: 6KB

.edata Size: 512B - Virtual size: 161B

.idata Size: 6KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 104B

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 6KB - Virtual size: 5KB

/4 Size: 512B - Virtual size: 28B

.text
Size: 613KB - Virtual size: 612KB

.data
Size: 43KB - Virtual size: 43KB

.rdata
Size: 945KB - Virtual size: 944KB

.pdata
Size: 20KB - Virtual size: 20KB

.xdata
Size: 19KB - Virtual size: 19KB

.bss
Size: - Virtual size: 6KB

.edata
Size: 512B - Virtual size: 161B

.idata
Size: 6KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 104B

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 6KB - Virtual size: 5KB

/4
Size: 512B - Virtual size: 28B