de7078fb2dcc943d5c944fc1b022f41c07b0acca47626af3cf981c82811ca30a

Sharing

Copy URL Twitter E-mail

General

Target

de7078fb2dcc943d5c944fc1b022f41c07b0acca47626af3cf981c82811ca30a
Size

554KB
MD5

853603ea14a08f3f8fbcdb3696aafc03
SHA1

a3e6d65e6d05797dacaf4a155f08215316a0d833
SHA256

de7078fb2dcc943d5c944fc1b022f41c07b0acca47626af3cf981c82811ca30a
SHA512

697bfd43c19aeb73082fcd70052891809e4a032b9ed25cd87af18651ffa41f6b7972142325d7118dd4a5d750beab54e3241449aa3d164b63281b92423f248e07
SSDEEP

6144:D+R7GpeMgH34gAGSOKKC1sGwXqWzQmGJRWfqITGl4bUnLSPKOP3Esehnnr79Oj3l:KUpPgX4gADOKkJqPJ8CKEsetn18xTv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de7078fb2dcc943d5c944fc1b022f41c07b0acca47626af3cf981c82811ca30a

Files

de7078fb2dcc943d5c944fc1b022f41c07b0acca47626af3cf981c82811ca30a
.dll windows:4 windows x64 arch:x64

57b28303cfcc9f36e40fae47034c0e26

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libvlccore

config_ChainParse
var_GetChecked
vlc_UrlClean
vlc_UrlParse
vlc_frame_Release
vlc_object_Log
vlc_tick_sleep

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcessId
GetLastError
GetSystemTimeAsFileTime
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_errno
_exit
_initterm
_lock
_stricmp
_unlock
abort
acos
atan
atoi
calloc
exit
fputc
free
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
qsort
realloc
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strstr
strtol
strtoul
tolower
toupper
ungetc
vfprintf
wcslen
_write
_strdup
_open
_close

ws2_32

WSACleanup
WSAGetLastError
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
gethostname
getsockopt
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
listen
recv
select
send
setsockopt
socket

Exports

Exports

vlc_entry
vlc_entry_api_version
vlc_entry_copyright
vlc_entry_license

Sections

.text
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57b28303cfcc9f36e40fae47034c0e26

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

advapi32

kernel32

msvcrt

ws2_32

Exports

Exports

Sections

.text Size: 424KB - Virtual size: 423KB

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 95KB - Virtual size: 95KB

.pdata Size: 12KB - Virtual size: 12KB

.xdata Size: 11KB - Virtual size: 11KB

.bss Size: - Virtual size: 3KB

.edata Size: 512B - Virtual size: 184B

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 1024B - Virtual size: 604B

/4 Size: 512B - Virtual size: 44B

.text
Size: 424KB - Virtual size: 423KB

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 95KB - Virtual size: 95KB

.pdata
Size: 12KB - Virtual size: 12KB

.xdata
Size: 11KB - Virtual size: 11KB

.bss
Size: - Virtual size: 3KB

.edata
Size: 512B - Virtual size: 184B

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 1024B - Virtual size: 604B

/4
Size: 512B - Virtual size: 44B