c153b3b4575e99b16d64bb7eaf0a0b750ea19fe3c7fa3ca675f535619a101c50

Sharing

Copy URL Twitter E-mail

General

Target

c153b3b4575e99b16d64bb7eaf0a0b750ea19fe3c7fa3ca675f535619a101c50
Size

205KB
MD5

bb9c5091f9d4ebb04d00bf986a3b2364
SHA1

8a61549086b02a104b69186347293c54e8fee486
SHA256

c153b3b4575e99b16d64bb7eaf0a0b750ea19fe3c7fa3ca675f535619a101c50
SHA512

19c37b2eb7887517290f7dbee7f1026282416e2ccd94a08b5e7eac4c5e57f50f65e7e15c54d684347fbffe4fdec7d69b0dc6bbab6a82f5996e75d1c8f56ad752
SSDEEP

3072:6HIIeuLpFZLuSbMjJ73YEfPb04WAxslZYG9ED4e6:II6JLhbMF3YEL0mxcYGTe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c153b3b4575e99b16d64bb7eaf0a0b750ea19fe3c7fa3ca675f535619a101c50

Files

c153b3b4575e99b16d64bb7eaf0a0b750ea19fe3c7fa3ca675f535619a101c50
.dll windows:6 windows x64 arch:x64

622abc15188f8c3429728a48fe525d92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

avcodec-59

av_init_packet
av_packet_unref
avcodec_alloc_context3
avcodec_configuration
avcodec_find_decoder
avcodec_free_context
avcodec_get_class
avcodec_open2
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_send_packet
avcodec_version

avdevice-59

avdevice_configuration
avdevice_version

avfilter-8

avfilter_configuration
avfilter_version

avformat-59

av_read_frame
avformat_close_input
avformat_configuration
avformat_get_class
avformat_open_input
avformat_version

avutil-57

av_dict_get
av_dict_set
av_frame_alloc
av_frame_clone
av_frame_copy_props
av_frame_free
av_frame_get_buffer
av_get_pix_fmt
av_get_pix_fmt_name
av_image_copy
av_image_fill_linesizes
av_log
av_log_set_level
av_opt_find
av_opt_set
av_pix_fmt_desc_get
av_strerror
av_strlcpy
avutil_configuration
avutil_version

swscale-6

sws_alloc_context
sws_freeContext
sws_getCachedContext
sws_get_class
sws_scale
swscale_configuration
swscale_version

swresample-4

swr_alloc
swr_free
swr_get_class
swresample_configuration
swresample_version

python38

PyUnicode_DecodeUTF8
PyNumber_Remainder
PyObject_GenericGetAttr
PyTraceBack_Here
PyEval_SaveThread
_PyThreadState_UncheckedGet
PyExc_RuntimeError
PyObject_SetAttrString
PyLong_FromLong
PyObject_GC_UnTrack
PyObject_Hash
PyExc_UnboundLocalError
PyErr_SetNone
PyDict_GetItemWithError
PyInterpreterState_GetID
Py_GetVersion
PyThread_allocate_lock
PyObject_GetAttr
PyUnicode_FromOrdinal
PyBytes_FromString
PyRun_StringFlags
PyGILState_Release
PyBytes_AsStringAndSize
_Py_NoneStruct
PyTuple_New
PySequence_Contains
PyDict_SetItemString
PyDict_Size
PyLong_FromLongLong
PyThread_acquire_lock
PyFrame_Type
PyFloat_FromDouble
PyExc_AttributeError
PyUnicode_New
PyNumber_Multiply
PyErr_SetString
PyExc_ZeroDivisionError
PyErr_WriteUnraisable
PyObject_GetIter
PyNumber_Add
PyErr_WarnFormat
PyEval_EvalCodeEx
PyExc_ValueError
_Py_CheckRecursiveCall
PyDict_Next
PyErr_Format
PyDict_Type
PyObject_RichCompare
PyTuple_Type
_Py_FalseStruct
PyCoro_Type
PyThreadState_Get
PyFloat_Type
PyModule_NewObject
PyMethod_Type
PyLong_Type
PyType_IsSubtype
PyErr_Restore
PyExc_OverflowError
_Py_Dealloc
PyImport_GetModuleDict
PyModule_GetDict
PyObject_Format
PyObject_Free
PyErr_ExceptionMatches
PyThread_release_lock
PyObject_GC_Del
PyErr_Fetch
PyOS_snprintf
PyLong_AsLong
PyObject_ClearWeakRefs
PyObject_Not
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyObject_GetBuffer
PyNumber_InPlaceMultiply
PyObject_SelfIter
PyNumber_InPlaceAdd
PyImport_AddModule
PyType_Ready
PyObject_GetAttrString
_PyGen_Send
PyErr_Clear
PyType_GetFlags
PyBytes_Type
PyObject_RichCompareBool
Py_FatalError
PyUnicode_Decode
PyCode_New
PyException_SetTraceback
PyCapsule_New
_PyObject_GenericGetAttrWithDict
PyDict_SetItem
PyDict_New
PyUnicode_Type
PyThread_free_lock
PyObject_CallFinalizerFromDealloc
_PyDict_GetItem_KnownHash
PyNumber_Index
PyMem_Free
PyExc_StopIteration
PyList_Type
PyErr_NoMemory
PyDict_GetItemString
PyObject_GetItem
PyObject_CallObject
PyModuleDef_Init
PyObject_GC_Track
PyBytes_FromStringAndSize
PyExc_NotImplementedError
PyGILState_Ensure
PyDict_DelItem
PyUnicode_Compare
PyObject_IsSubclass
PyExc_TypeError
PyMem_Realloc
PyCFunction_NewEx
_Py_tracemalloc_config
PyObject_IsTrue
PyObject_Str
PyExc_NameError
PyTuple_Pack
_PyByteArray_empty_string
Py_OptimizeFlag
_PyUnicode_Ready
PyMem_Malloc
PyList_AsTuple
PyExc_IndexError
PyExc_ImportError
_PyTraceMalloc_NewReference
PyGen_Type
_Py_TrueStruct
PyArg_UnpackTuple
PyUnicode_DecodeASCII
PyExc_SystemError
_PyUnicode_FastCopyCharacters
PyExc_AssertionError
PyObject_SetItem
_PyObject_GC_New
PyType_Modified
PyTraceBack_Type
PyMethodDescr_Type
PyExc_GeneratorExit
_PyList_Extend
PyEval_EvalFrameEx
PyLong_FromSize_t
_PyType_Lookup
PyUnicode_Format
PyObject_Size
PyBuffer_Release
PyObject_Call
PyByteArray_Type
PySequence_Tuple
PyEval_RestoreThread
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PyCFunction_Type
PyUnicode_InternFromString
PyLong_FromSsize_t
PyErr_NormalizeException
PyImport_ImportModuleLevelObject
PyImport_ImportModule
PySlice_Type
PyExc_DeprecationWarning
PyLong_AsSsize_t
PyFrame_New
PyFunction_Type
PyExc_RuntimeWarning
PyErr_WarnEx
PyObject_Malloc
_PyObject_CallFunction_SizeT
PyList_Append
PyErr_Occurred
PyErr_GivenExceptionMatches
PyCode_NewEmpty
PyErr_SetObject
PyExc_Exception
PyList_New
_Py_CheckRecursionLimit
PyObject_SetAttr
PyExc_BufferError
PyBaseObject_Type
PyObject_CallFunctionObjArgs
PySlice_New

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

memcmp
__C_specific_handler
__std_type_info_destroy_list
memset
memcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
strerror

Exports

Exports

PyInit_pic

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

622abc15188f8c3429728a48fe525d92

Headers

DLL Characteristics

File Characteristics

Imports

avcodec-59

avdevice-59

avfilter-8

avformat-59

avutil-57

swscale-6

swresample-4

python38

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 119KB - Virtual size: 118KB

.rdata Size: 50KB - Virtual size: 50KB

.data Size: 28KB - Virtual size: 32KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 119KB - Virtual size: 118KB

.rdata
Size: 50KB - Virtual size: 50KB

.data
Size: 28KB - Virtual size: 32KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 1KB - Virtual size: 1KB