dc361df27881d96c8b6fc56545a64290N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

dc361df27881d96c8b6fc56545a64290N.exe
Size

172KB
MD5

dc361df27881d96c8b6fc56545a64290
SHA1

ff97d1d1fcafa0343ed722ffd376f6d1a2e541e2
SHA256

06accb7671533304971e490d6289bd02d997663e9eb6dfadfd83f62d9db8e726
SHA512

c4739c98dbfb1c6fc103b9fe729cc170ccfc6a451beb37353903caf4fee5dc9572ad9fa399be44b81e25067afb8e61926e9ec45e1a07be56473d00477a1b983a
SSDEEP

3072:85mI1jyPsproWtdT9EpeYiPvkyAWzFaa90FaUaqqd:0mPsUWtdT9EAYiPMyAG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc361df27881d96c8b6fc56545a64290N.exe

Files

dc361df27881d96c8b6fc56545a64290N.exe
.dll windows:4 windows x86 arch:x86

dcc3a956b96cdd940c0f8ea71b7a5e2f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libgstpbutils-1.0-0

gst_audio_visualizer_get_type

libglib-2.0-0

g_free
g_strdup_printf

libgobject-2.0-0

g_type_class_peek_parent
g_type_register_static

libgstreamer-1.0-0

_gst_debug_category_new
_gst_debug_min
_gst_debug_register_funcptr
_gst_element_error_printf
gst_buffer_map
gst_buffer_unmap
gst_debug_log
gst_element_class_add_static_pad_template
gst_element_class_set_static_metadata
gst_element_message_full
gst_element_register
gst_library_error_quark
gst_plugin_add_dependency_simple
gst_plugin_register_static

libvisual-0.4-0

visual_actor_get_list
visual_actor_new
visual_actor_realize
visual_actor_run
visual_actor_set_video
visual_actor_video_negotiate
visual_audio_analyze
visual_audio_new
visual_audio_samplepool_input_channel
visual_buffer_new_with_buffer
visual_collection_size
visual_init
visual_is_initialized
visual_list_get
visual_log_set_critical_handler
visual_log_set_error_handler
visual_log_set_info_handler
visual_log_set_verboseness
visual_log_set_warning_handler
visual_object_unref
visual_plugin_load
visual_plugin_unload
visual_video_depth_enum_from_value
visual_video_new
visual_video_set_buffer
visual_video_set_depth
visual_video_set_dimension
visual_video_set_pitch

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
strchr
strlen
strncmp
vfprintf

Exports

Exports

_nm___gst_debug_min
gst_plugin_libvisual_get_desc
gst_plugin_libvisual_register
gst_visual_class_init
gst_visual_get_type
libvisual_debug

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 968B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 813B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dcc3a956b96cdd940c0f8ea71b7a5e2f

Headers

File Characteristics

Imports

libgstpbutils-1.0-0

libglib-2.0-0

libgobject-2.0-0

libgstreamer-1.0-0

libvisual-0.4-0

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 156B

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 968B

.edata Size: 512B - Virtual size: 258B

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 1024B - Virtual size: 832B

/4 Size: 1024B - Virtual size: 600B

/19 Size: 92KB - Virtual size: 91KB

/31 Size: 7KB - Virtual size: 6KB

/45 Size: 7KB - Virtual size: 7KB

/57 Size: 2KB - Virtual size: 2KB

/70 Size: 1024B - Virtual size: 813B

/81 Size: 9KB - Virtual size: 8KB

/92 Size: 512B - Virtual size: 512B

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 156B

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 968B

.edata
Size: 512B - Virtual size: 258B

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 1024B - Virtual size: 832B

/4
Size: 1024B - Virtual size: 600B

/19
Size: 92KB - Virtual size: 91KB

/31
Size: 7KB - Virtual size: 6KB

/45
Size: 7KB - Virtual size: 7KB

/57
Size: 2KB - Virtual size: 2KB

/70
Size: 1024B - Virtual size: 813B

/81
Size: 9KB - Virtual size: 8KB

/92
Size: 512B - Virtual size: 512B