4b7fa940d889be1d66363d8a0cf59ecfaf3656d6741892a7d54f913cc53a6ac0

Sharing

Copy URL Twitter E-mail

General

Target

4b7fa940d889be1d66363d8a0cf59ecfaf3656d6741892a7d54f913cc53a6ac0
Size

3.4MB
MD5

d9594c72bfeb54c24639ec2142294108
SHA1

0fc4123555bbdc2b96ab7da660493ae95d881d3a
SHA256

4b7fa940d889be1d66363d8a0cf59ecfaf3656d6741892a7d54f913cc53a6ac0
SHA512

9540f82897ef04cddffde305cc640d14d2d1dc88566902b10f52418b36bfed278c1d812a4943db333d47787ece59d4d840917ef48049eeb86c10b691ad9c1d86
SSDEEP

98304:qqu2GpC0pvXwZaNqA1D/P/5boB+3vDBQBxWFIbHEC61TkzyYAZFKjscrXYlvkgxk:qqP6iaNqA1D/P/5boB+7B8ep

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b7fa940d889be1d66363d8a0cf59ecfaf3656d6741892a7d54f913cc53a6ac0

Files

4b7fa940d889be1d66363d8a0cf59ecfaf3656d6741892a7d54f913cc53a6ac0
.dll windows:4 windows x86 arch:x86

48da748730c388a932fc4147bfcd58a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemInfo
GetVersionExA
GetCurrentProcess
GetLastError
CreateSemaphoreA
LoadLibraryA
GetProcAddress
OpenProcess
FreeLibrary
CreateFileA
CloseHandle
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
Sleep
DeleteCriticalSection
InitializeCriticalSection
GetThreadLocale
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
DeviceIoControl
GetVersion
CreateEventA
ResetEvent
GetSystemDefaultLangID
FormatMessageA
LocalFree
FindFirstFileA
FindNextFileA
FindClose
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameA
SetFilePointer
ReadFile
DisableThreadLibraryCalls
ReleaseSemaphore
WaitForSingleObject
GlobalMemoryStatus

user32

GetSystemMetrics
ExitWindowsEx

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

ole32

CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize
CoFreeUnusedLibraries
CoTaskMemAlloc

avifil32

AVIFileOpenA
AVIFileInfoA
AVIFileRelease
AVIStreamOpenFromFileA
AVIStreamInfoA
AVIStreamReadFormat
AVIStreamRelease
AVIFileExit
AVIFileInit

msvcrt

_stat
free
_adjust_fdiv
_initterm
_onexit
__dllonexit
log
log10
_except_handler3
sscanf
vsprintf
atoi
strncmp
time
fopen
fwrite
fclose
strncpy
strncat
toupper
strstr
strrchr
tolower
__CxxFrameHandler
??2@YAPAXI@Z
ceil
getenv
remove
??3@YAXPAX@Z
sprintf
malloc
?terminate@@YAXXZ
_iob
_write
_ftime
_strupr
_strnicmp
_strdup
_unlink
realloc
memmove
ftell
fseek
fflush
fread
strtok
_stati64
_purecall
_mbscmp
strchr
_lseek
_read
_close
_open
calloc
_stricmp
_snprintf
exit
fprintf
memset
memcpy
_ftol
fputs
atof
_assert
rename
_finite
strpbrk
strcspn
strtod
atol
_chkesp
strcpy
strlen
strcmp
_getpid

Exports

Exports

CloseCodecSetting
DVDApplySelection
DVDFreeRipInfo
DVDGetAngleNum
DVDGetAudioSampleRate
DVDGetChapterAudioNum
DVDGetChapterAudioString
DVDGetChapterFrames
DVDGetChapterNum
DVDGetChapterString
DVDGetChapterTime
DVDGetSelectedTitle
DVDGetSelectedTitleFrames
DVDGetSelectedTitleSeconds
DVDGetSelectedTitleSectors
DVDGetSelectedTitleTime
DVDGetSubtitleNum
DVDGetSubtitleString
DVDGetTitleFrames
DVDGetTitleNum
DVDGetTitleSeconds
DVDGetTitleSectors
DVDGetTitleString
DVDGetTitleStringByIndex
DVDGetVideoDim
DVDGetVideoFrameRate
DVDGetVideoRatio
DVDReadToFile
DVDResetRipModule
DVDRipOneFrame
DVDRipOneFrameClose
DVDRipOneFrameEnd
DVDRipOneFrameInit
DVDRipOneFrameSetFrame
DVDRipOneFrameStart
DVDSelectAngle
DVDSelectChapterAudio
DVDSelectChapters
DVDSelectSubtitle
DVDSelectTitle
DVDSetAudioSync
DVDSetBypassZeroTimeCell
DVDSetIgnoreReadError
DVDSetOutputAudioSampleRate
DVDSetRipClipInfo
DVDSetRipEndFrame
DVDSetRipOffsetFrame
DVDSetRipStartFrame
DVDSetVideoFrameRate
DVDSetVideoRatio
GetAVIInfo
GetCodecSettings
GetSize
IdealDVDInit
IdealDVDRip
IdealFileFrameRate
IdealFileFrames
IdealFileString
IdealGetPreview
IdealOpenDVD
Malloc16
Shutdown
WriteError
WriteInfo
getAviCodecs
getMode
getProgress
mdr_initiate
openIfo
rip
stop

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 12.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48da748730c388a932fc4147bfcd58a6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

avifil32

msvcrt

Exports

Exports

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.text1 Size: 4KB - Virtual size: 684B

.rodata Size: 12KB - Virtual size: 10KB

.rdata Size: 276KB - Virtual size: 275KB

.data Size: 112KB - Virtual size: 12.2MB

.data1 Size: 32KB - Virtual size: 29KB

.rodata Size: 4KB - Virtual size: 248B

.rsrc Size: 4KB - Virtual size: 16B

.reloc Size: 104KB - Virtual size: 103KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.text1
Size: 4KB - Virtual size: 684B

.rodata
Size: 12KB - Virtual size: 10KB

.rdata
Size: 276KB - Virtual size: 275KB

.data
Size: 112KB - Virtual size: 12.2MB

.data1
Size: 32KB - Virtual size: 29KB

.rodata
Size: 4KB - Virtual size: 248B

.rsrc
Size: 4KB - Virtual size: 16B

.reloc
Size: 104KB - Virtual size: 103KB