acfbbd4f636b392686a58743e8e61a38fede8fa9a4d607148c13e82a8b92d1cc

Sharing

Copy URL Twitter E-mail

General

Target

acfbbd4f636b392686a58743e8e61a38fede8fa9a4d607148c13e82a8b92d1cc
Size

4.1MB
MD5

f0be28acf5db48f44687dd5db6ecf65d
SHA1

32c1827558554c48cd9a33c751b3a73e98f3d23d
SHA256

acfbbd4f636b392686a58743e8e61a38fede8fa9a4d607148c13e82a8b92d1cc
SHA512

ed59a588b771c19e28dab3f3079187f35e163a6ba93dd7ef584afc0675b5464005eb4c84e6cf3b6d751787b55489ee32e3877e089c1f31ea7341b35c671b943a
SSDEEP

49152:vEE4A/YDkvb38lJmGLklwYL9Pah6vFwpUIWFKRJY67XjcSzIYEYFBmeICE:1lj8l9LU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acfbbd4f636b392686a58743e8e61a38fede8fa9a4d607148c13e82a8b92d1cc

Files

acfbbd4f636b392686a58743e8e61a38fede8fa9a4d607148c13e82a8b92d1cc
.dll windows:4 windows x64 arch:x64

af7dd846535f34e52d1adbb02786b9b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libvlccore

block_Alloc
config_ChainParse
var_GetChecked
vlc_GetCPUCount
vlc_Log

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject

msvcrt

__C_specific_handler
__dllonexit
__iob_func
__setusermatherr
_amsg_exit
_beginthreadex
_endthreadex
_errno
_exit
_initterm
_lock
_onexit
_setjmp
_ultoa
_unlock
_vsnprintf
abort
calloc
exit
fgetwc
fprintf
free
fwprintf
fwrite
getc
getenv
log10
malloc
memcpy
memmove
memset
printf
qsort
raise
rand
realloc
signal
strlen
strncmp
strtol
strtoul
vfprintf
wcscpy
_vsnwprintf
_snwprintf
longjmp
_write
_strdup
_open
_close

user32

MessageBoxW

Exports

Exports

vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af7dd846535f34e52d1adbb02786b9b9

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

advapi32

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 3.8MB - Virtual size: 3.8MB

.data Size: 2KB - Virtual size: 1KB

.rdata Size: 210KB - Virtual size: 210KB

.rodata Size: 2KB - Virtual size: 2KB

.pdata Size: 65KB - Virtual size: 65KB

.xdata Size: 66KB - Virtual size: 65KB

.bss Size: - Virtual size: 31KB

.edata Size: 512B - Virtual size: 160B

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 104B

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 4KB - Virtual size: 3KB

/4 Size: 512B - Virtual size: 28B

.text
Size: 3.8MB - Virtual size: 3.8MB

.data
Size: 2KB - Virtual size: 1KB

.rdata
Size: 210KB - Virtual size: 210KB

.rodata
Size: 2KB - Virtual size: 2KB

.pdata
Size: 65KB - Virtual size: 65KB

.xdata
Size: 66KB - Virtual size: 65KB

.bss
Size: - Virtual size: 31KB

.edata
Size: 512B - Virtual size: 160B

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 104B

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 4KB - Virtual size: 3KB

/4
Size: 512B - Virtual size: 28B