c2687385876f2066f278a333a9da196eec891025299024a1cb8c2f2a04b09818

Sharing

Copy URL Twitter E-mail

General

Target

c2687385876f2066f278a333a9da196eec891025299024a1cb8c2f2a04b09818
Size

129KB
MD5

df918beed3adabf8e88efc1aff9e9554
SHA1

67520da51e97b684adba7808a6a788e5c3941c57
SHA256

c2687385876f2066f278a333a9da196eec891025299024a1cb8c2f2a04b09818
SHA512

f8431b151d8a394b13d1c2a5e810e872655bbc32b21701801e196f3a36253fb2b1b5f49a0a90931d465ccc9fe726e44c5f8d26a0e4e4c7d789b4a4f464b971b8
SSDEEP

3072:N3wVx8uU13MjqlYvzBu6XD7g2nPJG67HHEebW5+fnwLAxXGBefDn/0doHhO3iPrY:cCu3el7hDhH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2687385876f2066f278a333a9da196eec891025299024a1cb8c2f2a04b09818

Files

c2687385876f2066f278a333a9da196eec891025299024a1cb8c2f2a04b09818
.exe windows:6 windows x64 arch:x64

2ed5a620438afe6cc2f68786242218b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Documents\vcpkg\buildtrees\aubio\x64-od-windows-rel\aubionotes.pdb

Imports

sndfile

ord4
ord3
ord39
ord50
ord2
ord23

avformat-60

av_read_frame
av_url_split
avformat_network_init
avformat_find_stream_info
avformat_seek_file
avformat_open_input
avformat_close_input

avcodec-60

avcodec_open2
avcodec_receive_frame
avcodec_find_decoder
av_packet_alloc
av_packet_free
av_packet_unref
avcodec_parameters_to_context
avcodec_send_packet
avcodec_free_context
avcodec_alloc_context3

swresample-4

swr_free
swr_close
swr_convert
swr_alloc
swr_init

avutil-58

av_opt_set_int
av_frame_free
av_frame_alloc
av_get_default_channel_layout
av_get_media_type_string
av_strerror
av_malloc
av_free

vcruntime140

memset
__current_exception_context
__current_exception
__C_specific_handler
strrchr
memmove

api-ms-win-crt-stdio-l1-1-0

fread
fopen
fwrite
ferror
feof
__p__commode
fclose
_set_fmode
fseek
__stdio_common_vsprintf
fflush
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
terminate
exit
_set_app_type
_crt_atexit
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
_exit
__p___argv
_cexit
_seh_filter_exe
_c_exit
_register_thread_local_exe_atexit_callback
_errno
_initialize_onexit_table
_register_onexit_function
__p___argc
strerror_s

api-ms-win-crt-filesystem-l1-1-0

_access

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
calloc

api-ms-win-crt-math-l1-1-0

log10f
expf
logf
floorf
floor
powf
atanf
sinf
__setusermatherr
atan2f
sqrtf
_fdclass
cosf

api-ms-win-crt-string-l1-1-0

strncpy
strnlen
_strnicmp

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

SetUnhandledExceptionFilter
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
RtlLookupFunctionEntry
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ed5a620438afe6cc2f68786242218b6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

sndfile

avformat-60

avcodec-60

swresample-4

avutil-58

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

Sections

.text Size: 103KB - Virtual size: 102KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 12KB - Virtual size: 14KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 60B

.text
Size: 103KB - Virtual size: 102KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 12KB - Virtual size: 14KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 60B