ed7a4293e3e6a565940fdbafa46d0850N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ed7a4293e3e6a565940fdbafa46d0850N.exe
Size

271KB
MD5

ed7a4293e3e6a565940fdbafa46d0850
SHA1

c6bc3e1c64b105dc5a0cd4437aa447c3c6d19513
SHA256

32941c60dd1687a521088b9b13b546308a3e4b54a52d09a8eb7a6b097cecdd4b
SHA512

4f7e48ca5727108083098d289f0e3610996665b8b9208bc0109ef10eb01b3846266655b52cf9703efbfe1a78e4fac6b0135584ad0f3303bce872ba4f3a3be2ae
SSDEEP

3072:5g+S1aG9jdlMjORcVleC5AC6FSV4hgjZ3L8vWVRfTngGFFaaSPFaU21jFaaRPFak:WF1aG9jMAcVD76ThgjFYvWV9g3maFUT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed7a4293e3e6a565940fdbafa46d0850N.exe

Files

ed7a4293e3e6a565940fdbafa46d0850N.exe
.dll windows:4 windows x86 arch:x86

69866feb71dec083a0dee1ec1d3e39c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libgstadaptivedemux-1.0-0

gst_adaptive_demux_get_type
gst_adaptive_demux_set_stream_struct_size
gst_adaptive_demux_stream_fragment_clear
gst_adaptive_demux_stream_new
gst_adaptive_demux_stream_queue_event
gst_adaptive_demux_stream_set_caps
gst_adaptive_demux_stream_set_tags

libgstcodecparsers-1.0-0

gst_h264_parse_sps
gst_h264_video_calculate_framerate

libgstisoff-1.0-0

gst_isoff_moof_box_free
gst_isoff_moof_box_parse
gst_isoff_parse_box_header

libglib-2.0-0

g_ascii_strcasecmp
g_ascii_strtoull
g_ascii_table
g_assertion_message_expr
g_free
g_intern_static_string
g_list_append
g_list_first
g_list_free_full
g_list_last
g_list_prepend
g_list_reverse
g_list_sort
g_log
g_malloc
g_malloc0
g_once_init_enter
g_once_init_leave
g_regex_new
g_regex_replace_literal
g_regex_unref
g_return_if_fail_warning
g_slice_alloc
g_slice_free1
g_slist_append
g_slist_free
g_slist_free_full
g_slist_prepend
g_str_has_prefix
g_strdup
g_strdup_printf
g_string_ascii_down
g_string_free
g_string_new
g_string_truncate
g_strrstr
g_strstr_len

libgobject-2.0-0

g_object_class_install_property
g_object_unref
g_param_spec_uint
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_name
g_type_register_static_simple
g_value_get_uint
g_value_set_uint

libgstbase-1.0-0

gst_adapter_available
gst_adapter_clear
gst_adapter_new
gst_adapter_push
gst_adapter_take_buffer
gst_byte_reader_get_sub_reader

libgstreamer-1.0-0

_gst_buffer_type
_gst_caps_type
_gst_debug_category_new
_gst_debug_min
_gst_element_error_printf
_gst_fraction_type
gst_buffer_get_size
gst_buffer_map
gst_buffer_new_allocate
gst_buffer_new_wrapped
gst_buffer_resize
gst_buffer_unmap
gst_caps_get_structure
gst_caps_new_simple
gst_caps_set_simple
gst_debug_log
gst_element_class_add_static_pad_template
gst_element_class_set_static_metadata
gst_element_message_full
gst_element_register
gst_event_new_protection
gst_event_parse_seek
gst_mini_object_unref
gst_object_unref
gst_pad_new_from_template
gst_plugin_register_static
gst_protection_select_system
gst_static_pad_template_get
gst_stream_error_quark
gst_structure_get_name
gst_structure_set
gst_structure_set_name
gst_tag_list_new
gst_util_uint64_scale_round

libintl-8

libintl_dgettext

libxml2-2

xmlDocGetRootElement
xmlFree
xmlFreeDoc
xmlGetProp
xmlNodeGetContent
xmlReadMemory

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
isxdigit
malloc
memcpy
strlen
strncmp
strtoul
vfprintf

Exports

Exports

_nm___gst_buffer_type
_nm___gst_caps_type
_nm___gst_debug_min
_nm___gst_fraction_type
_nm__g_ascii_table
_nm__xmlFree
gst_mss_demux_get_type
gst_mss_fragment_parser_add_buffer
gst_mss_fragment_parser_clear
gst_mss_fragment_parser_init
gst_mss_manifest_change_bitrate
gst_mss_manifest_free
gst_mss_manifest_get_current_bitrate
gst_mss_manifest_get_duration
gst_mss_manifest_get_gst_duration
gst_mss_manifest_get_live_seek_range
gst_mss_manifest_get_min_fragment_duration
gst_mss_manifest_get_protection_data
gst_mss_manifest_get_protection_system_id
gst_mss_manifest_get_streams
gst_mss_manifest_get_timescale
gst_mss_manifest_is_live
gst_mss_manifest_live_adapter_available
gst_mss_manifest_live_adapter_push
gst_mss_manifest_live_adapter_take_buffer
gst_mss_manifest_new
gst_mss_manifest_reload_fragments
gst_mss_manifest_seek
gst_mss_stream_advance_fragment
gst_mss_stream_fragment_parsing_needed
gst_mss_stream_get_caps
gst_mss_stream_get_current_bitrate
gst_mss_stream_get_fragment_gst_duration
gst_mss_stream_get_fragment_gst_timestamp
gst_mss_stream_get_fragment_url
gst_mss_stream_get_lang
gst_mss_stream_get_timescale
gst_mss_stream_get_type
gst_mss_stream_has_next_fragment
gst_mss_stream_parse_fragment
gst_mss_stream_regress_fragment
gst_mss_stream_seek
gst_mss_stream_select_bitrate
gst_mss_stream_set_active
gst_mss_stream_type_name
gst_plugin_smoothstreaming_get_desc
gst_plugin_smoothstreaming_register
mssdemux_debug

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 968B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69866feb71dec083a0dee1ec1d3e39c0

Headers

File Characteristics

Imports

libgstadaptivedemux-1.0-0

libgstcodecparsers-1.0-0

libgstisoff-1.0-0

libglib-2.0-0

libgobject-2.0-0

libgstbase-1.0-0

libgstreamer-1.0-0

libintl-8

libxml2-2

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 26KB

.data Size: 512B - Virtual size: 220B

.rdata Size: 5KB - Virtual size: 4KB

.bss Size: - Virtual size: 968B

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 5KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 2KB - Virtual size: 1KB

/4 Size: 1024B - Virtual size: 728B

/19 Size: 114KB - Virtual size: 113KB

/31 Size: 10KB - Virtual size: 9KB

/45 Size: 11KB - Virtual size: 10KB

/57 Size: 5KB - Virtual size: 4KB

/70 Size: 2KB - Virtual size: 1KB

/81 Size: 29KB - Virtual size: 28KB

/92 Size: 3KB - Virtual size: 2KB

.text
Size: 26KB - Virtual size: 26KB

.data
Size: 512B - Virtual size: 220B

.rdata
Size: 5KB - Virtual size: 4KB

.bss
Size: - Virtual size: 968B

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 5KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 2KB - Virtual size: 1KB

/4
Size: 1024B - Virtual size: 728B

/19
Size: 114KB - Virtual size: 113KB

/31
Size: 10KB - Virtual size: 9KB

/45
Size: 11KB - Virtual size: 10KB

/57
Size: 5KB - Virtual size: 4KB

/70
Size: 2KB - Virtual size: 1KB

/81
Size: 29KB - Virtual size: 28KB

/92
Size: 3KB - Virtual size: 2KB