D:\RDBuildPool\20240702-10164\cAVCENC\Release64_SSE2_vs2012\CLAVCVs2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ea4afde3258f0990da72391891af13abe512bd3d42193af63a6348e1e5367ced.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ea4afde3258f0990da72391891af13abe512bd3d42193af63a6348e1e5367ced.dll
Resource
win10v2004-20240802-en
General
-
Target
ea4afde3258f0990da72391891af13abe512bd3d42193af63a6348e1e5367ced
-
Size
708KB
-
MD5
e2de810166fb70846f8fec1114b41f86
-
SHA1
4e6c0bee71914ce3a5c313cdca5018bb12aae9e0
-
SHA256
ea4afde3258f0990da72391891af13abe512bd3d42193af63a6348e1e5367ced
-
SHA512
e40394241e649d0eb87316b821915f78b81570542f2242cbe55923e8d5dc0e5482790417e0f6a6fb7864e4df321e8163ec9f22e75e0b39ba5d10f8182cce195b
-
SSDEEP
12288:v1jldfSZWLJkWgDOQlOxF3M/9VDqLa/oEMJVLGS9SiYa9og1TpMOB:dlNdkdH9VDT/oEMJVF8ivr3MO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea4afde3258f0990da72391891af13abe512bd3d42193af63a6348e1e5367ced
Files
-
ea4afde3258f0990da72391891af13abe512bd3d42193af63a6348e1e5367ced.dll windows:6 windows x64 arch:x64
ed8fa458fdb1e2c927c4adcc3a95afcf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
EnterCriticalSection
WaitForSingleObject
Sleep
CreateSemaphoreA
CreateEventA
SetEvent
CreateThread
GetSystemInfo
GetLastError
HeapFree
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
HeapReAlloc
HeapSize
GetProcessHeap
SetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FreeEnvironmentStringsW
WideCharToMultiByte
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
SetStdHandle
FlushFileBuffers
LCMapStringW
WriteConsoleW
GetStringTypeW
CreateFileW
SetEndOfFile
ReadFile
ReadConsoleW
ReleaseSemaphore
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
GetEnvironmentStringsW
LoadLibraryA
GetThreadLocale
FormatMessageA
advapi32
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
Exports
Exports
CreateCL264Encoder
Sections
.text Size: 483KB - Virtual size: 482KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug_o Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.trace Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ