8c500af869dce8f01ad80968f5b065280c88740f7e8f9f2817c8a5f7501cffa8

Sharing

Copy URL

Twitter E-mail

General

Target

8c500af869dce8f01ad80968f5b065280c88740f7e8f9f2817c8a5f7501cffa8
Size

538KB
MD5

76dae6a70bcd03b7f81368e0d3f2ae9b
SHA1

da5d57b677d613bbc563fa76b03b46f07d6c01a5
SHA256

8c500af869dce8f01ad80968f5b065280c88740f7e8f9f2817c8a5f7501cffa8
SHA512

158d5bc31b6fc3517c51a56f30c01e994900c0bc904766dbc2a65a430080db1bd49f0c5a5633e6ab9939602915f9dc4e047c39adb556d2c7f93214ae2c53600a
SSDEEP

6144:tdpddzqjXfpbKUTejDYUwzF0EgFUqvKHVugxhY0/iJZuQUnmjYmLnPITkAK0nnjE:tLd6mFArL13fQUnmjYmETFK0nHuocb9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c500af869dce8f01ad80968f5b065280c88740f7e8f9f2817c8a5f7501cffa8

Files

8c500af869dce8f01ad80968f5b065280c88740f7e8f9f2817c8a5f7501cffa8
.dll regsvr32 windows:5 windows x64 arch:x64

6c8a49ad2135441ad3a019e2323f4eda

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

T:\__test_sys\__outputs\NNT-SNB32-W86_andmitri\mediasdk_tags_Win7_MFTs_15.31_promoted_53672\samples\_build\x64\Release\mfx_mft_vpp_w7_64.pdb

Imports

kernel32

CreateEventW
GetSystemInfo
QueryPerformanceFrequency
DeleteCriticalSection
ReleaseMutex
CloseHandle
GetModuleFileNameW
WideCharToMultiByte
lstrlenW
GetTimeZoneInformation
SetEnvironmentVariableA
CreateSemaphoreW
SetCurrentDirectoryW
GetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameA
FindFirstFileExA
ResetEvent
EnterCriticalSection
ReleaseSemaphore
LeaveCriticalSection
GetProcessTimes
InitializeCriticalSection
SetEvent
WaitForSingleObject
QueryPerformanceCounter
GetCurrentProcess
TryEnterCriticalSection
K32GetProcessMemoryInfo
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CompareStringW
CreateMutexW
CreateToolhelp32Snapshot
Module32First
Module32Next
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetLastError
HeapFree
DecodePointer
EncodePointer
HeapAlloc
ExitThread
CreateThread
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
GetCurrentThread
FlsAlloc
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetLocaleInfoW
RaiseException
RtlPcToFileHeader
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FatalAppExitA
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryW
SetStdHandle
WriteConsoleW
MultiByteToWideChar
SetFilePointer
CreateFileW
LCMapStringW
GetStringTypeW
SetEndOfFile
GetProcessHeap
ReadFile
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SwitchToThread
SetErrorMode
VirtualUnlock
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
FormatMessageA
CreateFileA
DeviceIoControl
CreateSemaphoreA
VirtualAlloc
VirtualFree
VirtualQuery
GetDriveTypeW

shlwapi

PathRemoveFileSpecW

mfplat

MFTRegister
MFCreateMediaType
MFCreateAttributes
MFCreateEventQueue
MFCreateMediaEvent
MFTUnregister

advapi32

RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegSetValueW
RegCreateKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW

ole32

CoTaskMemAlloc
StringFromGUID2
CoCreateInstance

user32

WindowFromPoint

d3d9

Direct3DCreate9

dxva2

DXVA2CreateDirect3DDeviceManager9

propsys

PSCreateMemoryPropertyStore

evr

MFCreateVideoSampleFromSurface

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c8a49ad2135441ad3a019e2323f4eda

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

shlwapi

mfplat

advapi32

ole32

user32

d3d9

dxva2

propsys

evr

Exports

Exports

Sections

.text Size: 334KB - Virtual size: 334KB

.rdata Size: 134KB - Virtual size: 134KB

.data Size: 15KB - Virtual size: 24KB

.pdata Size: 20KB - Virtual size: 20KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 334KB - Virtual size: 334KB

.rdata
Size: 134KB - Virtual size: 134KB

.data
Size: 15KB - Virtual size: 24KB

.pdata
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB