5396f38397cb39431f14539994d0b728ae324e6ab071e5411d1fa36de0b53f4f

Sharing

Copy URL Twitter E-mail

General

Target

5396f38397cb39431f14539994d0b728ae324e6ab071e5411d1fa36de0b53f4f
Size

187KB
MD5

38379649f92319f1b5aadc2871b6d591
SHA1

2be115de35bc553b8f929c4ac4d63c4497c0d076
SHA256

5396f38397cb39431f14539994d0b728ae324e6ab071e5411d1fa36de0b53f4f
SHA512

81f06608d76b2060920b81ac0a5c4643c7dd04d31d3ead9c0fead1fa44196921941245b484843f6d47f29f29defc82de293078413d030b76d70fb09575a02fd5
SSDEEP

3072:hdK5yf6s79VmBES8ehummX80CYSUR1aXzRBaBIA:hIg5VyMehuN80iURx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5396f38397cb39431f14539994d0b728ae324e6ab071e5411d1fa36de0b53f4f

Files

5396f38397cb39431f14539994d0b728ae324e6ab071e5411d1fa36de0b53f4f
.dll windows:4 windows x86 arch:x86

8cf5f80df6cc4bf38014ae011b24ca53

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetLogicalProcessorInformation
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
GlobalMemoryStatusEx
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject

msvcrt

_amsg_exit
_beginthreadex
_endthreadex
_initterm
_iob
_lock
_setjmp3
_strdup
_ultoa
_unlock
_write
abort
calloc
exit
fprintf
fputc
fputs
free
fwrite
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
realloc
sprintf
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strlen
strncat
strncmp
strncpy
strrchr
strpbrk
strspn
strstr
strtok
strxfrm
vfprintf

psapi

EnumProcessModules
GetProcessMemoryInfo

avutil-56

av_log_format_line
av_log_get_level
av_log_set_callback

postproc-55

postproc_configuration
postproc_license
postproc_version
pp_free_context
pp_free_mode
pp_get_context
pp_get_mode_by_name_and_quality
pp_help
pp_postprocess

Exports

Exports

JNI_OnLoad
JNI_OnLoad_jnijavacpp
JNI_OnUnload
JNI_OnUnload_jnijavacpp
Java_org_bytedeco_ffmpeg_global_postproc_postproc_1configuration
Java_org_bytedeco_ffmpeg_global_postproc_postproc_1license
Java_org_bytedeco_ffmpeg_global_postproc_postproc_1version
Java_org_bytedeco_ffmpeg_global_postproc_pp_1free_1context
Java_org_bytedeco_ffmpeg_global_postproc_pp_1free_1mode
Java_org_bytedeco_ffmpeg_global_postproc_pp_1get_1context
Java_org_bytedeco_ffmpeg_global_postproc_pp_1get_1mode_1by_1name_1and_1quality__Ljava_lang_String_2I
Java_org_bytedeco_ffmpeg_global_postproc_pp_1get_1mode_1by_1name_1and_1quality__Lorg_bytedeco_javacpp_BytePointer_2I
Java_org_bytedeco_ffmpeg_global_postproc_pp_1help__
Java_org_bytedeco_ffmpeg_global_postproc_pp_1help__I
Java_org_bytedeco_ffmpeg_global_postproc_pp_1postprocess__Ljava_nio_ByteBuffer_2Ljava_nio_IntBuffer_2Ljava_nio_ByteBuffer_2Ljava_nio_IntBuffer_2IILjava_nio_ByteBuffer_2ILorg_bytedeco_ffmpeg_postproc_pp_1mode_2Lorg_bytedeco_ffmpeg_postproc_pp_1context_2I
Java_org_bytedeco_ffmpeg_global_postproc_pp_1postprocess__Lorg_bytedeco_javacpp_BytePointer_2Lorg_bytedeco_javacpp_IntPointer_2Lorg_bytedeco_javacpp_BytePointer_2Lorg_bytedeco_javacpp_IntPointer_2IILorg_bytedeco_javacpp_BytePointer_2ILorg_bytedeco_ffmpeg_postproc_pp_1mode_2Lorg_bytedeco_ffmpeg_postproc_pp_1context_2I
Java_org_bytedeco_ffmpeg_global_postproc_pp_1postprocess__Lorg_bytedeco_javacpp_PointerPointer_2Lorg_bytedeco_javacpp_IntPointer_2Lorg_bytedeco_javacpp_PointerPointer_2Lorg_bytedeco_javacpp_IntPointer_2IILorg_bytedeco_javacpp_BytePointer_2ILorg_bytedeco_ffmpeg_postproc_pp_1mode_2Lorg_bytedeco_ffmpeg_postproc_pp_1context_2I
Java_org_bytedeco_ffmpeg_global_postproc_pp_1postprocess___3B_3I_3B_3III_3BILorg_bytedeco_ffmpeg_postproc_pp_1mode_2Lorg_bytedeco_ffmpeg_postproc_pp_1context_2I
Java_org_bytedeco_javacpp_BoolPointer_allocateArray
Java_org_bytedeco_javacpp_BoolPointer_get
Java_org_bytedeco_javacpp_BoolPointer_put
Java_org_bytedeco_javacpp_BooleanPointer_allocateArray
Java_org_bytedeco_javacpp_BooleanPointer_get__J
Java_org_bytedeco_javacpp_BooleanPointer_get___3ZII
Java_org_bytedeco_javacpp_BooleanPointer_put__JZ
Java_org_bytedeco_javacpp_BooleanPointer_put___3ZII
Java_org_bytedeco_javacpp_BytePointer_allocateArray
Java_org_bytedeco_javacpp_BytePointer_getBool
Java_org_bytedeco_javacpp_BytePointer_getChar
Java_org_bytedeco_javacpp_BytePointer_getDouble
Java_org_bytedeco_javacpp_BytePointer_getFloat
Java_org_bytedeco_javacpp_BytePointer_getInt
Java_org_bytedeco_javacpp_BytePointer_getLong
Java_org_bytedeco_javacpp_BytePointer_getPointer
Java_org_bytedeco_javacpp_BytePointer_getShort
Java_org_bytedeco_javacpp_BytePointer_get__J
Java_org_bytedeco_javacpp_BytePointer_get___3BII
Java_org_bytedeco_javacpp_BytePointer_putBool
Java_org_bytedeco_javacpp_BytePointer_putChar
Java_org_bytedeco_javacpp_BytePointer_putDouble
Java_org_bytedeco_javacpp_BytePointer_putFloat
Java_org_bytedeco_javacpp_BytePointer_putInt
Java_org_bytedeco_javacpp_BytePointer_putLong
Java_org_bytedeco_javacpp_BytePointer_putPointer
Java_org_bytedeco_javacpp_BytePointer_putShort
Java_org_bytedeco_javacpp_BytePointer_put__JB
Java_org_bytedeco_javacpp_BytePointer_put___3BII
Java_org_bytedeco_javacpp_BytePointer_strcat
Java_org_bytedeco_javacpp_BytePointer_strchr
Java_org_bytedeco_javacpp_BytePointer_strcmp
Java_org_bytedeco_javacpp_BytePointer_strcoll
Java_org_bytedeco_javacpp_BytePointer_strcpy
Java_org_bytedeco_javacpp_BytePointer_strcspn
Java_org_bytedeco_javacpp_BytePointer_strerror
Java_org_bytedeco_javacpp_BytePointer_strlen
Java_org_bytedeco_javacpp_BytePointer_strncat
Java_org_bytedeco_javacpp_BytePointer_strncmp
Java_org_bytedeco_javacpp_BytePointer_strncpy
Java_org_bytedeco_javacpp_BytePointer_strpbrk
Java_org_bytedeco_javacpp_BytePointer_strrchr
Java_org_bytedeco_javacpp_BytePointer_strspn
Java_org_bytedeco_javacpp_BytePointer_strstr
Java_org_bytedeco_javacpp_BytePointer_strtok
Java_org_bytedeco_javacpp_BytePointer_strxfrm
Java_org_bytedeco_javacpp_CLongPointer_allocateArray
Java_org_bytedeco_javacpp_CLongPointer_get
Java_org_bytedeco_javacpp_CLongPointer_put
Java_org_bytedeco_javacpp_CharPointer_allocateArray
Java_org_bytedeco_javacpp_CharPointer_get__J
Java_org_bytedeco_javacpp_CharPointer_get___3CII
Java_org_bytedeco_javacpp_CharPointer_put__JC
Java_org_bytedeco_javacpp_CharPointer_put___3CII
Java_org_bytedeco_javacpp_DoublePointer_allocateArray
Java_org_bytedeco_javacpp_DoublePointer_get__J
Java_org_bytedeco_javacpp_DoublePointer_get___3DII
Java_org_bytedeco_javacpp_DoublePointer_put__JD
Java_org_bytedeco_javacpp_DoublePointer_put___3DII
Java_org_bytedeco_javacpp_FloatPointer_allocateArray
Java_org_bytedeco_javacpp_FloatPointer_get__J
Java_org_bytedeco_javacpp_FloatPointer_get___3FII
Java_org_bytedeco_javacpp_FloatPointer_put__JF
Java_org_bytedeco_javacpp_FloatPointer_put___3FII
Java_org_bytedeco_javacpp_IntPointer_allocateArray
Java_org_bytedeco_javacpp_IntPointer_get__J
Java_org_bytedeco_javacpp_IntPointer_get___3III
Java_org_bytedeco_javacpp_IntPointer_put__JI
Java_org_bytedeco_javacpp_IntPointer_put___3III
Java_org_bytedeco_javacpp_Loader_addressof
Java_org_bytedeco_javacpp_Loader_getJavaVM
Java_org_bytedeco_javacpp_Loader_loadGlobal
Java_org_bytedeco_javacpp_Loader_totalChips
Java_org_bytedeco_javacpp_Loader_totalCores
Java_org_bytedeco_javacpp_Loader_totalProcessors
Java_org_bytedeco_javacpp_LongPointer_allocateArray
Java_org_bytedeco_javacpp_LongPointer_get__J
Java_org_bytedeco_javacpp_LongPointer_get___3JII
Java_org_bytedeco_javacpp_LongPointer_put__JJ
Java_org_bytedeco_javacpp_LongPointer_put___3JII
Java_org_bytedeco_javacpp_PointerPointer_allocateArray
Java_org_bytedeco_javacpp_PointerPointer_get
Java_org_bytedeco_javacpp_PointerPointer_put
Java_org_bytedeco_javacpp_Pointer_00024NativeDeallocator_deallocate
Java_org_bytedeco_javacpp_Pointer_allocate
Java_org_bytedeco_javacpp_Pointer_asDirectBuffer
Java_org_bytedeco_javacpp_Pointer_availablePhysicalBytes
Java_org_bytedeco_javacpp_Pointer_calloc
Java_org_bytedeco_javacpp_Pointer_free
Java_org_bytedeco_javacpp_Pointer_malloc
Java_org_bytedeco_javacpp_Pointer_memchr
Java_org_bytedeco_javacpp_Pointer_memcmp
Java_org_bytedeco_javacpp_Pointer_memcpy
Java_org_bytedeco_javacpp_Pointer_memmove
Java_org_bytedeco_javacpp_Pointer_memset
Java_org_bytedeco_javacpp_Pointer_physicalBytes
Java_org_bytedeco_javacpp_Pointer_realloc
Java_org_bytedeco_javacpp_Pointer_totalPhysicalBytes
Java_org_bytedeco_javacpp_Pointer_trimMemory
Java_org_bytedeco_javacpp_ShortPointer_allocateArray
Java_org_bytedeco_javacpp_ShortPointer_get__J
Java_org_bytedeco_javacpp_ShortPointer_get___3SII
Java_org_bytedeco_javacpp_ShortPointer_put__JS
Java_org_bytedeco_javacpp_ShortPointer_put___3SII
Java_org_bytedeco_javacpp_SizeTPointer_allocateArray
Java_org_bytedeco_javacpp_SizeTPointer_get
Java_org_bytedeco_javacpp_SizeTPointer_put

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8cf5f80df6cc4bf38014ae011b24ca53

Headers

File Characteristics

Imports

kernel32

msvcrt

psapi

avutil-56

postproc-55

Exports

Exports

Sections

.text Size: 121KB - Virtual size: 121KB

.data Size: 512B - Virtual size: 124B

.rdata Size: 16KB - Virtual size: 15KB

.eh_fram Size: 29KB - Virtual size: 29KB

.bss Size: - Virtual size: 1KB

.edata Size: 8KB - Virtual size: 7KB

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 121KB - Virtual size: 121KB

.data
Size: 512B - Virtual size: 124B

.rdata
Size: 16KB - Virtual size: 15KB

.eh_fram
Size: 29KB - Virtual size: 29KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 8KB - Virtual size: 7KB

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 6KB - Virtual size: 5KB