618a1409dea71c56b2eb7d31c59b2ba79f9657cc9c41960fc66493b3a0a97484

Sharing

Copy URL Twitter E-mail

General

Target

618a1409dea71c56b2eb7d31c59b2ba79f9657cc9c41960fc66493b3a0a97484
Size

1003KB
MD5

cc7edbce9f3318290adf85daa8a67b12
SHA1

386235d34979874d7a533139efa2c6b78b29c721
SHA256

618a1409dea71c56b2eb7d31c59b2ba79f9657cc9c41960fc66493b3a0a97484
SHA512

f614a1b79ed4bd09e6eb95515594d17bceb638cfba4fad480756a65898c9d73a441b7242845b745eb7f411576c981af4c115a9cae71698831d61f964e0cdd877
SSDEEP

12288:AYtoikAmPpgB1+/4WfYKrSy8tCPnZkE1yDAHgv/6UcD2:A2kAupgnWFBqfEGiUcD2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
618a1409dea71c56b2eb7d31c59b2ba79f9657cc9c41960fc66493b3a0a97484

Files

618a1409dea71c56b2eb7d31c59b2ba79f9657cc9c41960fc66493b3a0a97484
.dll windows:4 windows x64 arch:x64

617207cdd67c19f857c757da91a76b19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libvlccore

var_Inherit
vlc_frame_Alloc
vlc_frame_Release
vlc_object_Log

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

bcrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider

kernel32

AcquireSRWLockExclusive
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FileTimeToSystemTime
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFullPathNameW
GetHandleInformation
GetLastError
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetStdHandle
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeZoneInformation
InitOnceBeginInitialize
InitOnceComplete
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
MultiByteToWideChar
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSRWLockExclusive
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetConsoleTextAttribute
SetEvent
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadContext
SetThreadPriority
Sleep
SuspendThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_aligned_free
_aligned_malloc
_aligned_realloc
_amsg_exit
_assert
_beginthreadex
_endthreadex
_errno
_exit
_gmtime64
_hypot
_initterm
_localtime64
_lock
_mktime64
_setjmp
_sopen
_time64
_ultoa
_unlock
_wassert
_wsopen
abort
acos
asin
atan
atoi
bsearch
calloc
clock
cosh
div
exit
fclose
fprintf
fputc
fputs
fread
free
frexp
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
printf
rand
realloc
setvbuf
signal
sinh
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strrchr
strspn
strstr
strtol
strtoul
tan
tanh
tolower
ungetc
vfprintf
wcscat
wcscpy
wcslen
longjmp
_write
_strdup
_open
_isatty
_fdopen
_close

Exports

Exports

vlc_entry
vlc_entry_api_version
vlc_entry_copyright
vlc_entry_license

Sections

.text
Size: 832KB - Virtual size: 831KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 169B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

617207cdd67c19f857c757da91a76b19

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

advapi32

bcrypt

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 832KB - Virtual size: 831KB

.data Size: 3KB - Virtual size: 2KB

.rdata Size: 118KB - Virtual size: 118KB

.pdata Size: 16KB - Virtual size: 15KB

.xdata Size: 18KB - Virtual size: 17KB

.bss Size: - Virtual size: 16.2MB

.edata Size: 512B - Virtual size: 169B

.idata Size: 6KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 5KB - Virtual size: 4KB

/4 Size: 512B - Virtual size: 28B

.text
Size: 832KB - Virtual size: 831KB

.data
Size: 3KB - Virtual size: 2KB

.rdata
Size: 118KB - Virtual size: 118KB

.pdata
Size: 16KB - Virtual size: 15KB

.xdata
Size: 18KB - Virtual size: 17KB

.bss
Size: - Virtual size: 16.2MB

.edata
Size: 512B - Virtual size: 169B

.idata
Size: 6KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 5KB - Virtual size: 4KB

/4
Size: 512B - Virtual size: 28B