5b6ff5978b951af8585acd8c6b0fa970ad72d91baec84bacbe40e298e6971cd2

Sharing

Copy URL Twitter E-mail

General

Target

5b6ff5978b951af8585acd8c6b0fa970ad72d91baec84bacbe40e298e6971cd2
Size

369KB
MD5

0e9b2efe34e46cee4eb1e26c7bd8bf51
SHA1

92ef2eb4e2a953461a0d3b3fb32287106c2a12a6
SHA256

5b6ff5978b951af8585acd8c6b0fa970ad72d91baec84bacbe40e298e6971cd2
SHA512

f1da79cb7693229ebd7caf34e0cd020c2969b4ffddaf0b28e2430c843553d2d3054d21e03b6357577df0454824b9d748b489ec5f1c5aef9a49c385bb58b4e62a
SSDEEP

6144:S2BvMR0uxlHj5Rhu48os9eWH5am++QWDUueGAc1oC:S6vboltRhuPKk5++xoue5c1oC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b6ff5978b951af8585acd8c6b0fa970ad72d91baec84bacbe40e298e6971cd2

Files

5b6ff5978b951af8585acd8c6b0fa970ad72d91baec84bacbe40e298e6971cd2
.dll windows:4 windows x64 arch:x64

3a09f200d9dbb87445215ed5d47d52f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

blocksruntime

_Block_object_assign
_Block_object_dispose
_NSConcreteGlobalBlock
_NSConcreteStackBlock

libdl

dlopen
dlsym

libflac

FLAC__metadata_chain_delete
FLAC__metadata_chain_new
FLAC__metadata_chain_read_ogg_with_callbacks
FLAC__metadata_chain_read_with_callbacks
FLAC__metadata_chain_status
FLAC__metadata_iterator_delete
FLAC__metadata_iterator_get_block
FLAC__metadata_iterator_init
FLAC__metadata_iterator_new
FLAC__metadata_iterator_next

libgcc_s_seh-1

__emutls_get_address

libintl-8

DllMain

kernel32

AreFileApisANSI
CloseHandle
CreateFileW
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
GetCommandLineW
GetCurrentDirectoryW
GetFileAttributesA
GetFileAttributesW
GetFullPathNameW
GetLastError
GetLongPathNameW
GetModuleFileNameW
GetShortPathNameW
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReplaceFileW
SetCurrentDirectoryW
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_assert
_chsize
_close
_errno
_findclose
_findfirst64
_findnext64
_fullpath
_initterm
_lock
_lseek
_open
_putenv
_read
_strdup
_stricmp
_strnicmp
_time64
_unlink
_unlock
_utime64
_wcsdup
_wfopen
_wfullpath
_wmkdir
_wstat64
abort
atof
atoi
calloc
fclose
fputc
free
fwrite
getenv
localeconv
malloc
_write
memcmp
memcpy
memset
qsort
realloc
strcat
strchr
strcmp
strcpy
strerror
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strstr
tolower
toupper
vfprintf
wcschr
wcscpy
wcslen
wcsrchr

shell32

CommandLineToArgvW

shlwapi

PathFileExistsW
PathMatchSpecA

libvorbisfile-3

ov_clear
ov_comment
ov_open_callbacks

dispatch

_dispatch_queue_attr_concurrent
dispatch_async
dispatch_queue_create
dispatch_release
dispatch_semaphore_create
dispatch_semaphore_signal
dispatch_semaphore_wait
dispatch_sync

Exports

Exports

Base64decode
Base64decode_len
Base64encode
Base64encode_len
_adjust_varstring_len
_esds_tag_written_size
artwork_abort_all_http_requests
artwork_http_request
artwork_load
artwork_remove_listener
artwork_save_to_music_folders
cache_configchanged
copy_file
cover_info_alloc
cover_info_cleanup
cover_info_ref
cover_info_release
deadbeef
dlhandle
dlopened
ensure_dir
fetch_from_albumart_org
fetch_from_lastfm
fetch_from_musicbrainz
fetch_from_wos
flac_extract_art
fnmatch
fopen
fopen_sys
make_cache_root_path
mp4_get_cover_atom
mp4_init_ddb_file_callbacks
mp4_load_tags
mp4_read_metadata
mp4_read_metadata_file
mp4_write_metadata
mp4p_Opus_atomdata_free
mp4p_Opus_atomdata_read
mp4p_Opus_atomdata_write
mp4p_alac_atomdata_free
mp4p_alac_atomdata_read
mp4p_alac_atomdata_write
mp4p_atom_append
mp4p_atom_clone
mp4p_atom_clone_list
mp4p_atom_dump
mp4p_atom_find
mp4p_atom_free
mp4p_atom_free_list
mp4p_atom_init
mp4p_atom_insert
mp4p_atom_meta_find_custom
mp4p_atom_new
mp4p_atom_remove_sibling
mp4p_atom_remove_subatom
mp4p_atom_subatom_count
mp4p_atom_to_buffer
mp4p_atom_type_compare
mp4p_atom_type_invalid
mp4p_atom_update_size
mp4p_chap_atomdata_free
mp4p_chap_atomdata_read
mp4p_chap_atomdata_write
mp4p_chpl_atomdata_free
mp4p_chpl_atomdata_read
mp4p_chpl_atomdata_write
mp4p_co64_atomdata_free
mp4p_co64_atomdata_read
mp4p_co64_atomdata_write
mp4p_dOps_atomdata_free
mp4p_dOps_atomdata_read
mp4p_dOps_atomdata_write
mp4p_dbg_dump_atom
mp4p_dref_atomdata_free
mp4p_dref_atomdata_read
mp4p_dref_atomdata_write
mp4p_esds_atomdata_free
mp4p_esds_atomdata_read
mp4p_esds_atomdata_write
mp4p_file_close
mp4p_file_open_read
mp4p_file_open_readwrite
mp4p_fourcc_compare
mp4p_genre_index_for_name
mp4p_genre_name_for_index
mp4p_hdlr_atomdata_free
mp4p_hdlr_atomdata_read
mp4p_hdlr_atomdata_write
mp4p_hdlr_init
mp4p_ilst_create_custom
mp4p_ilst_create_genre
mp4p_ilst_create_text
mp4p_ilst_create_track_disc
mp4p_ilst_meta_atomdata_free
mp4p_ilst_meta_atomdata_read
mp4p_ilst_meta_atomdata_write
mp4p_mdhd_atomdata_free
mp4p_mdhd_atomdata_read
mp4p_mdhd_atomdata_write
mp4p_meta_atomdata_free
mp4p_meta_atomdata_read
mp4p_meta_atomdata_write
mp4p_meta_create_atom
mp4p_mp4a_atomdata_free
mp4p_mp4a_atomdata_read
mp4p_mp4a_atomdata_write
mp4p_mvhd_atomdata_free
mp4p_mvhd_atomdata_read
mp4p_mvhd_atomdata_write
mp4p_open
mp4p_rebuild_positions
mp4p_sample_offset
mp4p_sample_size
mp4p_smhd_atomdata_free
mp4p_smhd_atomdata_read
mp4p_smhd_atomdata_write
mp4p_stco_atomdata_free
mp4p_stco_atomdata_read
mp4p_stco_atomdata_write
mp4p_stsc_atomdata_free
mp4p_stsc_atomdata_read
mp4p_stsc_atomdata_write
mp4p_stsd_atomdata_free
mp4p_stsd_atomdata_read
mp4p_stsd_atomdata_write
mp4p_stsz_atomdata_free
mp4p_stsz_atomdata_read
mp4p_stsz_atomdata_write
mp4p_stts_atomdata_free
mp4p_stts_atomdata_read
mp4p_stts_atomdata_write
mp4p_stts_mp4sample_containing_sample
mp4p_stts_sample_duration
mp4p_stts_total_num_samples
mp4p_stts_total_sample_duration
mp4p_tkhd_atomdata_free
mp4p_tkhd_atomdata_read
mp4p_tkhd_atomdata_write
mp4p_trak_has_chapters
mp4p_trak_playable
mp4p_update_metadata
mp4tagutil_modify_meta
ogg_extract_art
path_long
path_short
plugin
read_esds_tag_size
realpath
remove_cache_item
rename_windows
scandir
set_default_working_dir
start_cache_cleaner
startup_fixes
stat_windows
stop_cache_cleaner
strcasestr
strcopy_escape
sync_queue
uri_escape
win_charset_conv
win_mkdir
windows_arg_fix
write_esds_tag_size
write_file

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a09f200d9dbb87445215ed5d47d52f6

Headers

DLL Characteristics

File Characteristics

Imports

blocksruntime

libdl

libflac

libgcc_s_seh-1

libintl-8

kernel32

msvcrt

shell32

shlwapi

libvorbisfile-3

dispatch

Exports

Exports

Sections

.text Size: 90KB - Virtual size: 90KB

.data Size: 1024B - Virtual size: 624B

.rdata Size: 16KB - Virtual size: 15KB

.pdata Size: 3KB - Virtual size: 3KB

.xdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 4KB

.edata Size: 5KB - Virtual size: 5KB

.idata Size: 5KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 128B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 800B

/4 Size: 1KB - Virtual size: 1KB

/19 Size: 70KB - Virtual size: 69KB

/31 Size: 13KB - Virtual size: 13KB

/45 Size: 31KB - Virtual size: 31KB

/57 Size: 6KB - Virtual size: 6KB

/70 Size: 1024B - Virtual size: 544B

/81 Size: 8KB - Virtual size: 7KB

/97 Size: 34KB - Virtual size: 34KB

/113 Size: 2KB - Virtual size: 1KB

.text
Size: 90KB - Virtual size: 90KB

.data
Size: 1024B - Virtual size: 624B

.rdata
Size: 16KB - Virtual size: 15KB

.pdata
Size: 3KB - Virtual size: 3KB

.xdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 4KB

.edata
Size: 5KB - Virtual size: 5KB

.idata
Size: 5KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 128B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 800B

/4
Size: 1KB - Virtual size: 1KB

/19
Size: 70KB - Virtual size: 69KB

/31
Size: 13KB - Virtual size: 13KB

/45
Size: 31KB - Virtual size: 31KB

/57
Size: 6KB - Virtual size: 6KB

/70
Size: 1024B - Virtual size: 544B

/81
Size: 8KB - Virtual size: 7KB

/97
Size: 34KB - Virtual size: 34KB

/113
Size: 2KB - Virtual size: 1KB