4f67fb855f6f8c149718b79118f900a769d105335d1ae75a19b3895828c799d9

Sharing

Copy URL Twitter E-mail

General

Target

4f67fb855f6f8c149718b79118f900a769d105335d1ae75a19b3895828c799d9
Size

209KB
MD5

c3c1ff3edd6b9248438bc0ac39575da8
SHA1

d4d7c87b4ff9c2c0156589d2d5e2447c4a96c820
SHA256

4f67fb855f6f8c149718b79118f900a769d105335d1ae75a19b3895828c799d9
SHA512

c4510c7d4dcdb1df5955eee4f813435bd1c862172b3361759d2e4ea9cf20f42f971846d0ed376df1ca292ee7803a0bcdaf7270947c53cce76f05fce2913bc0ed
SSDEEP

3072:XlXiI6SvjTfTL40BURNzJe42UjMNdjp0E87572XyisnAjkI/1cE5p78:RYNNe42UjM3jpTw5McW1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f67fb855f6f8c149718b79118f900a769d105335d1ae75a19b3895828c799d9

Files

4f67fb855f6f8c149718b79118f900a769d105335d1ae75a19b3895828c799d9
.dll windows:6 windows x64 arch:x64

64b0cdb31620e7d24486e77773d04ba0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\Documents\Visual Studio 2022\Projects\CSpeechKit\CSpeechKitX64\Release\CSpeechKitX64.pdb

Imports

kernel32

WideCharToMultiByte
GetLastError
MultiByteToWideChar
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
LoadLibraryW
GetProcAddress
LoadLibraryA
VerSetConditionMask
VerifyVersionInfoW
FreeLibrary
InitializeCriticalSectionEx
DeleteCriticalSection
CreateFileW
GetConsoleMode
GetConsoleOutputCP
IsDebuggerPresent
OutputDebugStringW
RaiseException
EnterCriticalSection
LeaveCriticalSection
CloseHandle
InitializeCriticalSectionAndSpinCount
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlUnwind
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetTimeZoneInformation
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetStringTypeW
SetFilePointerEx
SetStdHandle
FlushFileBuffers
WriteFile
WriteConsoleW

Exports

Exports

AddChoiceToVocabList
AddCommandToVocab
CreateAcaTTSSynthesizer
CreateCereVoiceSynthesizer
CreateCommandVocab
CreateCustomDictation
CreateDgnRecognizer
CreateDictationVocab
CreateEditDictation
CreateGrammarVocab
CreateMCSRecognizer
CreateMCSSynthesizer
CreateMSPRecognizer
CreateMSPSynthesizer
CreateSAPI5Recognizer
CreateSAPI5Synthesizer
CreateSwiftSynthesizer
CreateWindowsMediaRecognizer
CreateWindowsMediaSynthesizer
DestroyAcaTTSSynthesizer
DestroyCereVoiceSynthesizer
DestroyCommandVocab
DestroyCustomDictation
DestroyDgnRecognizer
DestroyDictationVocab
DestroyEditDictation
DestroyGrammarVocab
DestroyMCSRecognizer
DestroyMCSSynthesizer
DestroyMSPRecognizer
DestroyMSPSynthesizer
DestroySAPI5Recognizer
DestroySAPI5Synthesizer
DestroySwiftSynthesizer
DestroyWindowsMediaRecognizer
DestroyWindowsMediaSynthesizer
DisableRule
DisableVocab
EnableRule
EnableVocab
GetRecognizerCallback
GetRecognizerDefaultEngine
GetRecognizerEngine
GetRecognizerEngines
GetRecognizerProperty
GetRecognizerTopics
GetSynthesizerCallback
GetSynthesizerDefaultEngine
GetSynthesizerEngine
GetSynthesizerEngines
GetSynthesizerProperty
Initialize
PauseSpeaking
RecognizerRegisterCallback
RecognizerUnregisterCallback
RemoveChoiceFromVocabList
RemoveCommandFromVocab
ResumeSpeaking
SetAudioDestinationToDefault
SetAudioDestinationToFile
SetAudioDestinationToStream
SetAudioSourceToDefault
SetAudioSourceToFile
SetAudioSourceToStream
SetCredentials
SetRecognizerCallback
SetRecognizerEngine
SetRecognizerProperty
SetSynthesizerCallback
SetSynthesizerEngine
SetSynthesizerProperty
Speak
StartRecognition
StopRecognition
StopSpeaking
SynthesizerRegisterCallback
SynthesizerUnregisterCallback
Terminate
TranscribeAudio

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64b0cdb31620e7d24486e77773d04ba0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 133KB - Virtual size: 132KB

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 3KB - Virtual size: 8KB

.pdata Size: 8KB - Virtual size: 8KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 133KB - Virtual size: 132KB

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 3KB - Virtual size: 8KB

.pdata
Size: 8KB - Virtual size: 8KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB