13e1e3965762cd81fa332bdde46d2e92cfa1a3b706a394703f489940355ab4d1

Sharing

Copy URL Twitter E-mail

General

Target

13e1e3965762cd81fa332bdde46d2e92cfa1a3b706a394703f489940355ab4d1
Size

1.2MB
MD5

6be191c7adf3d2e3ef76e17844d29931
SHA1

47714b39a383f721a599680212107933904bf4ce
SHA256

13e1e3965762cd81fa332bdde46d2e92cfa1a3b706a394703f489940355ab4d1
SHA512

358ed6359890fe17dd0ff16f042dda218e4cad5f4ec04f8c14dd84a6cc7bc4d42bb5865fc005a3ad17d5b82049bae92f1efe0db1f0edc07f004357db293204d3
SSDEEP

6144:AU+ceg33Uhn5L1TBJBHXuf/HE9uTCtMw5tR00oWE8jOyuDregcW8Ofo:9gjFe3euWtMYbPVCyuDregcW8qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13e1e3965762cd81fa332bdde46d2e92cfa1a3b706a394703f489940355ab4d1

Files

13e1e3965762cd81fa332bdde46d2e92cfa1a3b706a394703f489940355ab4d1
.dll windows:4 windows x86 arch:x86

e254aedcc8e06eb8e51b381cba42e6a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ogg

oggpack_writealign
oggpack_readinit
oggpack_look
oggpack_adv
oggpack_read
oggpack_write
oggpack_writeclear
oggpack_writeinit
oggpack_reset
oggpack_get_buffer
oggpack_bytes

kernel32

LCMapStringA
ReadFile
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
GetLastError
CloseHandle
InitializeCriticalSection
SetStdHandle
GetFileType
WriteFile
GetProcAddress
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
RaiseException
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
RtlUnwind
GetStringTypeA
GetStringTypeW

Exports

Exports

_analysis_output_always
_floor_P
_mapping_P
_residue_P
vorbis_analysis
vorbis_analysis_blockout
vorbis_analysis_buffer
vorbis_analysis_headerout
vorbis_analysis_init
vorbis_analysis_wrote
vorbis_bitrate_addblock
vorbis_bitrate_flushpacket
vorbis_block_clear
vorbis_block_init
vorbis_comment_add
vorbis_comment_add_tag
vorbis_comment_clear
vorbis_comment_init
vorbis_comment_query
vorbis_comment_query_count
vorbis_commentheader_out
vorbis_dsp_clear
vorbis_encode_ctl
vorbis_encode_init
vorbis_encode_init_vbr
vorbis_encode_setup_init
vorbis_encode_setup_managed
vorbis_encode_setup_vbr
vorbis_granule_time
vorbis_info_blocksize
vorbis_info_clear
vorbis_info_init
vorbis_packet_blocksize
vorbis_synthesis
vorbis_synthesis_blockin
vorbis_synthesis_halfrate
vorbis_synthesis_halfrate_p
vorbis_synthesis_headerin
vorbis_synthesis_init
vorbis_synthesis_lapout
vorbis_synthesis_pcmout
vorbis_synthesis_read
vorbis_synthesis_restart
vorbis_synthesis_trackonly
vorbis_window

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 896KB - Virtual size: 915KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e254aedcc8e06eb8e51b381cba42e6a2

Headers

File Characteristics

Imports

ogg

kernel32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 108KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 896KB - Virtual size: 915KB

.reloc Size: 16KB - Virtual size: 14KB

.text Size: 188KB - Virtual size: 188KB

.text
Size: 112KB - Virtual size: 108KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 896KB - Virtual size: 915KB

.reloc
Size: 16KB - Virtual size: 14KB

.text
Size: 188KB - Virtual size: 188KB