c0c006797f94d49155641cdf22450eecbbeeb90cab143864e49b4e13098f8451

Sharing

Copy URL Twitter E-mail

General

Target

c0c006797f94d49155641cdf22450eecbbeeb90cab143864e49b4e13098f8451
Size

18KB
MD5

7a2181bc21a56bcecda62beae6158274
SHA1

1ccaddc3ef759b5937aa7fc4f37dccf401c13edf
SHA256

c0c006797f94d49155641cdf22450eecbbeeb90cab143864e49b4e13098f8451
SHA512

c076e81b058bba5ba958b1d34eea13d55a7a29369496cbbd93617c74bf22e4cc82b12e1c2337fb729c67cd20c40cf9000a1324db9cef9ccd7c1c38dd8f4eee6b
SSDEEP

384:KIyiT4v56m5Huh4YVqtjE8K8SlDLmb38feJ90bkEu80m:pymyuhrVIjlSVabHMuPm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0c006797f94d49155641cdf22450eecbbeeb90cab143864e49b4e13098f8451

Files

c0c006797f94d49155641cdf22450eecbbeeb90cab143864e49b4e13098f8451
.dll windows:6 windows

5a5ff06ad7a572bffec97683468d5c3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

config_ChainParse
picture_CopyProperties
picture_Release
var_Create
var_GetChecked
vlc_Log

ucrtbase

__acrt_iob_func
__p___argc
__p___argv
__p___wargv
__p__environ
__p__wenviron
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vswprintf
__timezone
__tzname
_close
_configure_narrow_argv
_configure_wide_argv
_crt_atexit
_execute_onexit_table
_exit
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_open
_register_onexit_function
_set_app_type
_tzset
_write
abort
calloc
free
fwrite
malloc
memcpy
strcmp
strlen
strncmp

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
__chkstk

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

Exports

Exports

vlc_entry__4_0_3
vlc_entry_copyright__4_0_3
vlc_entry_license__4_0_3

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ctors
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dtors
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a5ff06ad7a572bffec97683468d5c3a

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

ucrtbase

kernel32

advapi32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 700B

.CRT Size: 512B - Virtual size: 44B

.ctors Size: 512B - Virtual size: 12B

.dtors Size: 512B - Virtual size: 8B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 936B

.reloc Size: 1024B - Virtual size: 608B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 700B

.CRT
Size: 512B - Virtual size: 44B

.ctors
Size: 512B - Virtual size: 12B

.dtors
Size: 512B - Virtual size: 8B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 1024B - Virtual size: 608B