AVPlayerWndProc
Static task
static1
Behavioral task
behavioral1
Sample
6edcf99d9b6e4d5d217b4f452ff8a8ccc1ce10f69bc98ef01647b11aa569000d.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6edcf99d9b6e4d5d217b4f452ff8a8ccc1ce10f69bc98ef01647b11aa569000d.dll
Resource
win10v2004-20240802-en
General
-
Target
6edcf99d9b6e4d5d217b4f452ff8a8ccc1ce10f69bc98ef01647b11aa569000d
-
Size
76KB
-
MD5
b06cbb8ce01a491912b4429fb2ef6d10
-
SHA1
ad18949edf2ed1cf75bc4528bb3efcea8fe9adeb
-
SHA256
6edcf99d9b6e4d5d217b4f452ff8a8ccc1ce10f69bc98ef01647b11aa569000d
-
SHA512
ef33ac0e812cbcfb025ad2147c893e87187004fe70995c85ae558694c314671ed1943e9fef13e20b313cf5a5f559cc6c8831e4fd3d1eb9b40bf892308cb4f0a5
-
SSDEEP
1536:LqzmkltUH1cR1BviEy6mw3CSE5s07gZD:LqzSKx3Xd/Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6edcf99d9b6e4d5d217b4f452ff8a8ccc1ce10f69bc98ef01647b11aa569000d
Files
-
6edcf99d9b6e4d5d217b4f452ff8a8ccc1ce10f69bc98ef01647b11aa569000d.dll windows:6 windows x64 arch:x64
e1dbec553f543032cf20b0c7decb804a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mfplay
MFPCreateMediaPlayer
shlwapi
ord219
propsys
PropVariantToUInt64
kernel32
LoadResource
LockResource
SizeofResource
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FreeLibrary
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
FindResourceW
user32
LoadBitmapW
InvalidateRect
SetTimer
KillTimer
GetCursorPos
LoadStringW
gdi32
GetStockObject
SelectClipRgn
BeginPath
EndPath
StrokePath
MoveToEx
PatBlt
StretchDIBits
SelectObject
AngleArc
ole32
PropVariantClear
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
vcruntime140
__std_exception_copy
__std_type_info_destroy_list
__std_terminate
__CxxFrameHandler3
memset
memcpy
memmove
_CxxThrowException
__C_specific_handler
__std_exception_destroy
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_cexit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
api-ms-win-crt-string-l1-1-0
wcslen
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ