ed6821b05ecfa341501b75626c969240N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ed6821b05ecfa341501b75626c969240N.exe
Size

241KB
MD5

ed6821b05ecfa341501b75626c969240
SHA1

4402f00e03d74d1ea84d20d8fbfa0ea8779c7bb6
SHA256

5543b1768d62a97d72bd54d020105e84a135978517e7f43718a99039f801fa13
SHA512

8075b23087c2f558eaa15d8ffee620c1d946569f08015f1207c7d7050fe4b73bf499edb7ae7edf24ea13bfb29e02d8eac5ab60bc915f585f2de045fe28b3b557
SSDEEP

3072:qrGPvrR7bpmlLYz5kOZY8DeMizsTUdYk36NpFFaaT2TFaUaH3FaUaTHjkZktG06l:qg17bpmlsJO8DeMasgGk36NS1YG0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed6821b05ecfa341501b75626c969240N.exe

Files

ed6821b05ecfa341501b75626c969240N.exe
.dll windows:4 windows x86 arch:x86

0d63bfc43340d2239b76e19064970cf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libglib-2.0-0

g_assertion_message_expr
g_free
g_intern_static_string
g_log
g_mutex_lock
g_mutex_unlock
g_once_init_enter
g_once_init_leave

libgobject-2.0-0

g_enum_register_static
g_object_class_install_property
g_param_spec_boolean
g_param_spec_enum
g_param_spec_uint
g_type_add_interface_static
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_name
g_type_register_static_simple
g_value_get_boolean
g_value_get_enum
g_value_get_uint
g_value_set_boolean
g_value_set_enum
g_value_set_uint

libgstreamer-1.0-0

_gst_debug_category_new
_gst_debug_min
_gst_debug_register_funcptr
_gst_element_error_printf
gst_buffer_map
gst_buffer_pool_config_add_option
gst_buffer_pool_get_config
gst_buffer_pool_set_config
gst_buffer_unmap
gst_caps_to_string
gst_debug_log
gst_element_class_add_static_pad_template
gst_element_class_set_static_metadata
gst_element_message_full
gst_element_register
gst_mini_object_copy
gst_object_unref
gst_pad_has_current_caps
gst_pad_push_event
gst_plugin_register_static
gst_preset_get_type
gst_query_add_allocation_meta
gst_query_find_allocation_meta
gst_query_parse_nth_allocation_pool
gst_query_set_nth_allocation_pool
gst_static_pad_template_get_caps
gst_stream_error_quark

libgstvideo-1.0-0

gst_video_codec_frame_unref
gst_video_codec_state_ref
gst_video_codec_state_unref
gst_video_decoder_allocate_output_frame
gst_video_decoder_drop_frame
gst_video_decoder_finish_frame
gst_video_decoder_get_oldest_frame
gst_video_decoder_get_output_state
gst_video_decoder_get_type
gst_video_decoder_negotiate
gst_video_decoder_set_needs_format
gst_video_decoder_set_output_state
gst_video_decoder_set_packetized
gst_video_encoder_allocate_output_buffer
gst_video_encoder_finish_frame
gst_video_encoder_get_oldest_frame
gst_video_encoder_get_type
gst_video_encoder_negotiate
gst_video_encoder_set_output_state
gst_video_event_new_upstream_force_key_unit
gst_video_frame_map
gst_video_frame_unmap
gst_video_meta_api_get_type

libopenh264

WelsCreateDecoder
WelsCreateSVCEncoder
WelsDestroyDecoder
WelsDestroySVCEncoder

libstdc++-6

_ZdlPv
_Znwj

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
strlen
strncmp
vfprintf

libgcc_s_sjlj-1

__divdi3
__udivdi3
__umoddi3

Exports

Exports

_nm___gst_debug_min
gst_openh264dec_get_type
gst_openh264enc_get_type
gst_plugin_openh264_get_desc
gst_plugin_openh264_register

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 237B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d63bfc43340d2239b76e19064970cf9

Headers

File Characteristics

Imports

libglib-2.0-0

libgobject-2.0-0

libgstreamer-1.0-0

libgstvideo-1.0-0

libopenh264

libstdc++-6

kernel32

msvcrt

libgcc_s_sjlj-1

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 17KB

.data Size: 512B - Virtual size: 284B

.rdata Size: 5KB - Virtual size: 5KB

.bss Size: - Virtual size: 1000B

.edata Size: 512B - Virtual size: 237B

.idata Size: 5KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 2KB - Virtual size: 1KB

/4 Size: 1024B - Virtual size: 632B

/19 Size: 125KB - Virtual size: 124KB

/31 Size: 8KB - Virtual size: 8KB

/45 Size: 8KB - Virtual size: 8KB

/57 Size: 3KB - Virtual size: 2KB

/70 Size: 1KB - Virtual size: 1KB

/81 Size: 12KB - Virtual size: 12KB

/92 Size: 2KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 17KB

.data
Size: 512B - Virtual size: 284B

.rdata
Size: 5KB - Virtual size: 5KB

.bss
Size: - Virtual size: 1000B

.edata
Size: 512B - Virtual size: 237B

.idata
Size: 5KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 2KB - Virtual size: 1KB

/4
Size: 1024B - Virtual size: 632B

/19
Size: 125KB - Virtual size: 124KB

/31
Size: 8KB - Virtual size: 8KB

/45
Size: 8KB - Virtual size: 8KB

/57
Size: 3KB - Virtual size: 2KB

/70
Size: 1KB - Virtual size: 1KB

/81
Size: 12KB - Virtual size: 12KB

/92
Size: 2KB - Virtual size: 1KB