bc162c0cb583b1f678b37e578b84a9f915134be0ce014819f515c879224132f5

General

Target

bc162c0cb583b1f678b37e578b84a9f915134be0ce014819f515c879224132f5
Size

89KB
MD5

4b5fd84f4e27802f697848d8d0437686
SHA1

2563a54ea1bc56d1df514312cd3dc048b10cca2d
SHA256

bc162c0cb583b1f678b37e578b84a9f915134be0ce014819f515c879224132f5
SHA512

531a9651aa7c411d591838447b26b0ee35e602a0cabf6bd858c9ff673127bf57f9193c3458685dcfd2f5dcf31a81284d65d7231c3a60e4187a2b2baaa4e4f3c3
SSDEEP

1536:MVyT657Xnf1wTzi2LX7pTFZyoW7jrJnA1uJ661A5OoTmbT48WjT+lec9:I57XNl2fp7yooxA1uJZA5PTmbT4pjye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc162c0cb583b1f678b37e578b84a9f915134be0ce014819f515c879224132f5

Files

bc162c0cb583b1f678b37e578b84a9f915134be0ce014819f515c879224132f5
.dll windows:6 windows x86 arch:x86

d21c61e413a57a763f913b8cd4f9248d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\jenkins\workspace\realplayer_loc_24_0_1\realtimes\Release\resources\rtcreator_resdll_zh-cn.pdb

Imports

vcruntime140

memset
__telemetry_main_invoke_trigger
__std_type_info_destroy_list
__telemetry_main_return_trigger
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit

kernel32

SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
UnhandledExceptionFilter

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d21c61e413a57a763f913b8cd4f9248d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 908B

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 512B - Virtual size: 304B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 908B

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 512B - Virtual size: 304B