ead92ca45d638e982eeffdac62691a78208b293a38c7040645bbe919462bffec

Sharing

Copy URL Twitter E-mail

General

Target

ead92ca45d638e982eeffdac62691a78208b293a38c7040645bbe919462bffec
Size

91KB
MD5

a4eb7a54df0abbaea0b59ab96975fc2e
SHA1

470c69528f8866115edc53b4226effd855be67dc
SHA256

ead92ca45d638e982eeffdac62691a78208b293a38c7040645bbe919462bffec
SHA512

a48470a62a814d3b7a90273d38207211d6af53cc1ace6d9867944d67919a202af3f5f9c7c86500999b4ff2c7fdc131ed686b95b4a43dad1830d445a32b1c959b
SSDEEP

1536:qVYJodJJjowHAJvbDfI0kaR/kMEexLgX9ujpJqPktBCqTEE7WQpuCsoK66jcAdUb:qVYJSJjojtvfI0z/pxEXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ead92ca45d638e982eeffdac62691a78208b293a38c7040645bbe919462bffec

Files

ead92ca45d638e982eeffdac62691a78208b293a38c7040645bbe919462bffec
.dll windows:6 windows x64 arch:x64

4ab19f0229ff640f47a60d0167dadb0f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

P:\src\Devices\NativePlayer\windows\x64\Release\RNPermissions\RNPermissions.pdb

Imports

msvcp140_app

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z

vcruntime140_1_app

__CxxFrameHandler4

vcruntime140_app

_CxxThrowException
__std_type_info_destroy_list
__current_exception
__std_exception_destroy
__C_specific_handler
memmove
__std_exception_copy
memcpy
memcmp
__std_terminate
memset
__current_exception_context

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
abort
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_errno
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo
terminate

api-ms-win-crt-string-l1-1-0

iswspace

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vswprintf

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
GetProcAddress
FreeLibrary

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead
InterlockedFlushSList
InterlockedPushEntrySList

oleaut32

SysAllocString
SetErrorInfo
GetErrorInfo
SysFreeString
SysStringLen

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ab19f0229ff640f47a60d0167dadb0f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcp140_app

vcruntime140_1_app

vcruntime140_app

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-interlocked-l1-1-0

oleaut32

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-heap-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-com-l1-1-0

Exports

Exports

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 12KB - Virtual size: 14KB

.pdata Size: 3KB - Virtual size: 3KB

.reloc Size: 1024B - Virtual size: 652B

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 12KB - Virtual size: 14KB

.pdata
Size: 3KB - Virtual size: 3KB

.reloc
Size: 1024B - Virtual size: 652B