85417e8f826811415aa1eea9afa581ecb3034a0f4080ee5b0b57c67d4d51eee0

Sharing

Copy URL Twitter E-mail

General

Target

85417e8f826811415aa1eea9afa581ecb3034a0f4080ee5b0b57c67d4d51eee0
Size

726KB
MD5

3aaad5d266ce2ec3164978edb19f0d64
SHA1

d580bc24a662a272bc36d54edaba36f489b20bb2
SHA256

85417e8f826811415aa1eea9afa581ecb3034a0f4080ee5b0b57c67d4d51eee0
SHA512

a0dc43027d4867f88761d3de40d452934ce0f8591644e9f3c9a574c8f4437c604d3288316181a22755b5f4809684e2417052c9f02dd29c3d9cbe78d3a3b47eb7
SSDEEP

6144:YszxewU/A+hMIDFdCYmdGgI0ErFYsIdwwgHiVW9PbIWVFiognu5jXJwHR:YwjI7MIRwVwYErm/gCijdVFFBwx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85417e8f826811415aa1eea9afa581ecb3034a0f4080ee5b0b57c67d4d51eee0

Files

85417e8f826811415aa1eea9afa581ecb3034a0f4080ee5b0b57c67d4d51eee0
.dll windows:4 windows x86 arch:x86

b72a3f2f685ff95c36e664ac36472fb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

__msg_Generic
decoder_DeletePicture
decoder_NewPicture
vlc_plugin_set

kernel32

DeleteCriticalSection
EnterCriticalSection
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_close
_open
_read
_strdup
_swab
__dllonexit
__lc_codepage
__mb_cur_max
_errno
_iob
_isctype
_pctype
_setjmp
abort
cos
fflush
floor
fopen
fprintf
fputc
free
fwrite
getenv
gmtime
localeconv
localtime
log
longjmp
malloc
memchr
memcpy
memmove
memset
rand
realloc
sin
sprintf
sqrt
srand
strchr
strcmp
strlen
strpbrk
strstr
strtol
strtoul
time
toupper
vfprintf
wcslen

Exports

Exports

vlc_entry__1_0_0e
vlc_entry_copyright__1_0_0e
vlc_entry_license__1_0_0e

Sections

.text
Size: 367KB - Virtual size: 367KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 169B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gnu_deb
Size: 512B - Virtual size: 36B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b72a3f2f685ff95c36e664ac36472fb5

Headers

File Characteristics

Imports

libvlccore

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 367KB - Virtual size: 367KB

.data Size: 102KB - Virtual size: 102KB

.rdata Size: 234KB - Virtual size: 234KB

.bss Size: - Virtual size: 12KB

.edata Size: 512B - Virtual size: 169B

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 18KB - Virtual size: 17KB

.gnu_deb Size: 512B - Virtual size: 36B

.text
Size: 367KB - Virtual size: 367KB

.data
Size: 102KB - Virtual size: 102KB

.rdata
Size: 234KB - Virtual size: 234KB

.bss
Size: - Virtual size: 12KB

.edata
Size: 512B - Virtual size: 169B

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 18KB - Virtual size: 17KB

.gnu_deb
Size: 512B - Virtual size: 36B