55abbd66f91975fd35b538595dcbd67e07eb37584c9aef27164dfd88a346b102

Sharing

Copy URL Twitter E-mail

General

Target

55abbd66f91975fd35b538595dcbd67e07eb37584c9aef27164dfd88a346b102
Size

2.2MB
MD5

1b50aa73394cbcd0f45b12e4c2a8c22e
SHA1

e31114d1077632d98106ee78b004e92540962d47
SHA256

55abbd66f91975fd35b538595dcbd67e07eb37584c9aef27164dfd88a346b102
SHA512

5cb6af077e92babd1022d940cb095cbb203d36cf0d1c56249eda3c7d4653f659bfb2526328754911dd0c2c2b56e6633ee177fb427c7b513e92b168bfeb05c1e5
SSDEEP

24576:8KVxQi1wCgFmrRzloyEwGPQYKvNrgtzQClsU/8EG1PwYT2zmfpjIFbgFeU+cHO50:GRB4NqoSTm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55abbd66f91975fd35b538595dcbd67e07eb37584c9aef27164dfd88a346b102

Files

55abbd66f91975fd35b538595dcbd67e07eb37584c9aef27164dfd88a346b102
.dll windows:6 windows x64 arch:x64

e05595daef849f9715b3f71b2dcf952a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\audacity\audacity\.build.x64\RelWithDebInfo\lib-theme-resources.pdb

Imports

lib-theme

??0RegisteredTheme@ThemeBase@@QEAA@VComponentInterfaceSymbol@@W4PreferredSystemAppearance@@AEBV?$vector@EV?$allocator@E@std@@@std@@@Z
??1RegisteredTheme@ThemeBase@@QEAA@XZ

lib-strings

??0Identifier@@QEAA@PEBD@Z
?empty@Identifier@@QEBA_NXZ
??1Identifier@@QEAA@XZ
??0TranslatableString@@QEAA@XZ
??0TranslatableString@@QEAA@VwxString@@V?$function@$$A6A?AVwxString@@AEBV1@W4Request@TranslatableString@@@Z@std@@@Z
??1TranslatableString@@QEAA@XZ
??0TranslatableString@@QEAA@AEBV0@@Z

wxbase313u_vc_x64_custom

??1wxString@@QEAA@XZ
??0wxString@@QEAA@PEB_W@Z
??0wxString@@QEAA@AEBV0@@Z

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

_CxxThrowException
memmove
__std_exception_destroy
__current_exception_context
__C_specific_handler
memset
__std_type_info_destroy_list
__std_exception_copy
__current_exception
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_execute_onexit_table
_initialize_narrow_environment
_crt_at_quick_exit
_cexit
_initterm
_initterm_e
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
terminate
_crt_atexit
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

kernel32

RtlVirtualUnwind
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
IsDebuggerPresent

Exports

Exports

?Load@ThemeResources@@YAXXZ

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e05595daef849f9715b3f71b2dcf952a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

lib-theme

lib-strings

wxbase313u_vc_x64_custom

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 1KB - Virtual size: 3KB

.pdata Size: 2KB - Virtual size: 1KB

.idata Size: 5KB - Virtual size: 4KB

.00cfg Size: 512B - Virtual size: 373B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 788B

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 1KB - Virtual size: 3KB

.pdata
Size: 2KB - Virtual size: 1KB

.idata
Size: 5KB - Virtual size: 4KB

.00cfg
Size: 512B - Virtual size: 373B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 788B