c0a96e5b3ce443491ae7ed0b8a640178af6a4a6aef4541963e1183f01589e59b

Sharing

Copy URL Twitter E-mail

General

Target

c0a96e5b3ce443491ae7ed0b8a640178af6a4a6aef4541963e1183f01589e59b
Size

770KB
MD5

dee07d675a0219b7438480cb5428c7c4
SHA1

bfc2bee04a6d50ca6e1dabc7b1e506589ce40e34
SHA256

c0a96e5b3ce443491ae7ed0b8a640178af6a4a6aef4541963e1183f01589e59b
SHA512

10010513c24f39554b8edfbd08ac975edaa7e05dad8e11ac03217c325b00ce75425cd8c667bb06e057d953d6e6b6c24f58e15ebbf04f6aa4e93dbaad525d5e62
SSDEEP

24576:Xhs0NL5tj112jGLF2eoRdDyLI3QAKcIDdtOgM1swkzs:xs+L5tj112jGLF2eoRdDyLI3QAtglwes

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0a96e5b3ce443491ae7ed0b8a640178af6a4a6aef4541963e1183f01589e59b

Files

c0a96e5b3ce443491ae7ed0b8a640178af6a4a6aef4541963e1183f01589e59b
.dll windows:6 windows x86 arch:x86

2cc32d098a34cd82f0a84454cd45f0e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\SoundEdge\HP.Immersive.DSP\APORelease\x86\HPIMMA32.pdb

Imports

ole32

CoTaskMemFree
StringFromCLSID

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

kernel32

CloseHandle
CreateFileW
WriteConsoleW
WriteFile
GetCurrentThreadId
OutputDebugStringW
WideCharToMultiByte
FlushFileBuffers
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
MultiByteToWideChar
GetLastError
FormatMessageW
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
GetConsoleMode
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetModuleFileNameW
GetCurrentThread
HeapFree
HeapAlloc
GetACP
GetStdHandle
GetFileType
OutputDebugStringA
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
HeapReAlloc
SetStdHandle
HeapSize
GetConsoleCP
SetFilePointerEx

Exports

Exports

SEDSPAPI_Clear
SEDSPAPI_CreateComponent
SEDSPAPI_DisposeComponent
SEDSPAPI_Free
SEDSPAPI_Initialize
SEDSPAPI_IsInputFormatSupported
SEDSPAPI_IsOutputFormatSupported
SEDSPAPI_OnIdle
SEDSPAPI_Process
SEDSPAPI_ReadWriteData
SEDSPAPI_Record
SEDSPAPI_SetIOFormat
SEDSPAPI_SetInputGain
SEDSPAPI_SetParameter

Sections

.text
Size: 566KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2cc32d098a34cd82f0a84454cd45f0e7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ole32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 566KB - Virtual size: 566KB

.rdata Size: 115KB - Virtual size: 115KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 566KB - Virtual size: 566KB

.rdata
Size: 115KB - Virtual size: 115KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 24KB - Virtual size: 23KB