30524a66f4745dbb57bbce8254c829bc1eeca865da1e6785fdfaef508bbbb4aa

Sharing

Copy URL Twitter E-mail

General

Target

30524a66f4745dbb57bbce8254c829bc1eeca865da1e6785fdfaef508bbbb4aa
Size

17KB
MD5

5bb8bfe6030979cf8854e16a3fe40817
SHA1

bdb4c84ac4c4adb4b37f26b2ead5d1ea65d742b7
SHA256

30524a66f4745dbb57bbce8254c829bc1eeca865da1e6785fdfaef508bbbb4aa
SHA512

869739951e7b26c331ff2035fdf8bb897c072acfc3f44b034407fccfa23e2b1d6a16c0359a5e91efbecd084fc7046f624cb9a54895967b464074b13e604cfed2
SSDEEP

192:KUeqbd9xzrR4PYQFfHbfxm7NNZr0H65Pd+zyPuND9AIpWAIJ90gvovzs0JS6hQn:KRqXlwYQRarZq0lDM9APJ90bvFQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30524a66f4745dbb57bbce8254c829bc1eeca865da1e6785fdfaef508bbbb4aa

Files

30524a66f4745dbb57bbce8254c829bc1eeca865da1e6785fdfaef508bbbb4aa
.dll windows:6 windows

8c7dac0e49c0031f357805a3195bae5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

es_format_IsSimilar
picture_CopyPixels
picture_CopyProperties
picture_Release
vlc_Log
vlc_fourcc_GetChromaDescription
vlc_fourcc_IsYUV

ucrtbase

__acrt_iob_func
__p___argc
__p___argv
__p___wargv
__p__environ
__p__wenviron
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vswprintf
__timezone
__tzname
_close
_configure_narrow_argv
_configure_wide_argv
_crt_atexit
_execute_onexit_table
_exit
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_open
_register_onexit_function
_set_app_type
_tzset
_write
abort
calloc
free
fwrite
memcpy
strlen
strncmp

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
__chkstk

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

Exports

Exports

vlc_entry__4_0_3
vlc_entry_copyright__4_0_3
vlc_entry_license__4_0_3

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ctors
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dtors
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c7dac0e49c0031f357805a3195bae5f

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

ucrtbase

kernel32

advapi32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 700B

.CRT Size: 512B - Virtual size: 44B

.ctors Size: 512B - Virtual size: 12B

.dtors Size: 512B - Virtual size: 8B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 936B

.reloc Size: 1024B - Virtual size: 548B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 700B

.CRT
Size: 512B - Virtual size: 44B

.ctors
Size: 512B - Virtual size: 12B

.dtors
Size: 512B - Virtual size: 8B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 1024B - Virtual size: 548B