b3162817e70adf7c2560504e9505052d7530e0bd1106869fc38aa32fe4ed5414

Sharing

Copy URL Twitter E-mail

General

Target

b3162817e70adf7c2560504e9505052d7530e0bd1106869fc38aa32fe4ed5414
Size

1.4MB
MD5

e7cbb92e142294d4a2b341b50d57be24
SHA1

03b7eb8a822969046347bd9323e268e5a89fe516
SHA256

b3162817e70adf7c2560504e9505052d7530e0bd1106869fc38aa32fe4ed5414
SHA512

05fb765c610f38e3586ae7bbb0dad25fb0406e941224356dd88b8cb31bfe90ef3ba2287287104052fee8a7d691b731e55d0e1e852d77c747f082cea4dd0bce68
SSDEEP

24576:wMKf7piGlGAvEX3y7kv59T71Dg1xTR+wm8RaP/MTXvePKA/MTXvenU2QSGOweVX2:SfebwKnQnLPBmGFV

Score

1^/10

Malware Config

Signatures

Files

b3162817e70adf7c2560504e9505052d7530e0bd1106869fc38aa32fe4ed5414
.dll windows:5 windows x86 arch:x86

53257a2f4cb1ec6d076440864c8e0e39

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:e6:5a:d8:07:b8:49:7b:07:49:d4:15:68:d6:26:d0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/07/2015, 00:00

Not After

13/07/2018, 12:00

Subject

CN=Mozilla Corporation,O=Mozilla Corporation,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

84:4d:c2:cf:17:0f:f7:a7:25:81:35:f2:47:b4:83:d7:9b:e9:2d:27
Signer

Actual PE Digest

84:4d:c2:cf:17:0f:f7:a7:25:81:35:f2:47:b4:83:d7:9b:e9:2d:27

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\builds\moz2_slave\m-rel-w32-00000000000000000000\build\src\obj-firefox\media\ffvpx\libavcodec\mozavcodec.pdb

Imports

mozavutil

av_image_fill_pointers
av_color_primaries_name
av_get_media_type_string
av_frame_set_channels
av_samples_get_buffer_size
av_buffer_allocz
av_get_channel_layout_nb_channels
av_buffer_pool_init
av_get_planar_sample_fmt
av_frame_get_channels
av_buffer_pool_get
av_frame_set_pkt_duration
av_frame_set_pkt_pos
av_frame_get_colorspace
av_match_list
av_frame_set_colorspace
av_get_pix_fmt_name
avpriv_set_systematic_pal2
av_vlog
av_image_check_sar
av_samples_copy
av_strlcatf
av_frame_set_color_range
av_log_get_level
av_opt_set_dict
av_frame_get_pkt_duration
av_dict_free
av_frame_set_best_effort_timestamp
av_get_colorspace_name
av_frame_copy_props
av_image_check_size
av_default_item_name
avpriv_request_sample
av_get_cpu_flags
av_dict_copy
av_color_space_name
av_reduce
av_get_bytes_per_sample
av_get_sample_fmt_name
av_frame_alloc
av_frame_unref
av_frame_move_ref
av_frame_free
av_reallocp_array
av_cpu_count
av_fast_realloc
av_opt_copy
av_opt_set_defaults2
av_opt_free
av_opt_set
av_pix_fmt_desc_get
av_get_pix_fmt_loss
av_find_best_pix_fmt_of_2
av_image_fill_max_pixsteps
av_image_get_buffer_size
av_image_fill_arrays
av_image_copy
av_sample_fmt_is_planar
av_frame_ref
av_get_channel_layout_string
av_mul_q
av_samples_fill_arrays
av_strlcat
avpriv_frame_get_metadatap
av_frame_set_pkt_size
av_color_transfer_name
av_frame_get_color_range
av_chroma_location_name
av_color_range_name
av_buffer_pool_uninit
av_image_copy_to_buffer
av_image_fill_linesizes
av_frame_new_side_data
av_image_alloc
av_dict_get
av_freep
av_buffer_alloc
av_buffer_default_free
av_realloc
av_buffer_create
av_buffer_unref
av_buffer_ref
av_dict_set
av_log
av_rescale_q
av_buffer_realloc
av_mallocz
av_opt_set_defaults
av_malloc
av_gcd
av_free

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObject
GetModuleHandleA
Sleep
SetEvent
ReleaseSemaphore
CloseHandle
ResetEvent
GetProcAddress
DeleteCriticalSection
CreateSemaphoreA
CreateEventA

vcruntime140

__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__std_type_info_destroy_list
memset
_except_handler4_common
memcpy

api-ms-win-crt-math-l1-1-0

lrintf
_libm_sse2_sin_precise
ceil
_libm_sse2_sqrt_precise

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_beginthreadex
abort

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

Exports

Exports

av_bitstream_filter_close
av_bitstream_filter_filter
av_bitstream_filter_init
av_bitstream_filter_next
av_codec_ffversion
av_codec_get_chroma_intra_matrix
av_codec_get_codec_descriptor
av_codec_get_codec_properties
av_codec_get_lowres
av_codec_get_max_lowres
av_codec_get_pkt_timebase
av_codec_get_seek_preroll
av_codec_is_decoder
av_codec_is_encoder
av_codec_next
av_codec_set_chroma_intra_matrix
av_codec_set_codec_descriptor
av_codec_set_lowres
av_codec_set_pkt_timebase
av_codec_set_seek_preroll
av_copy_packet
av_copy_packet_side_data
av_dup_packet
av_fast_padded_malloc
av_fast_padded_mallocz
av_free_packet
av_get_audio_frame_duration
av_get_bits_per_sample
av_get_codec_tag_string
av_get_exact_bits_per_sample
av_get_pcm_codec
av_get_profile_name
av_grow_packet
av_hwaccel_next
av_init_packet
av_lockmgr_register
av_log_ask_for_sample
av_log_missing_feature
av_new_packet
av_packet_copy_props
av_packet_free_side_data
av_packet_from_data
av_packet_get_side_data
av_packet_merge_side_data
av_packet_move_ref
av_packet_new_side_data
av_packet_pack_dictionary
av_packet_ref
av_packet_rescale_ts
av_packet_shrink_side_data
av_packet_side_data_name
av_packet_split_side_data
av_packet_unpack_dictionary
av_packet_unref
av_parser_change
av_parser_close
av_parser_init
av_parser_next
av_parser_parse2
av_picture_copy
av_picture_crop
av_picture_pad
av_qsv_alloc_context
av_register_bitstream_filter
av_register_codec_parser
av_register_hwaccel
av_resample
av_resample_close
av_resample_compensate
av_resample_init
av_shrink_packet
av_vorbis_parse_frame
av_vorbis_parse_frame_flags
av_vorbis_parse_free
av_vorbis_parse_init
av_vorbis_parse_reset
av_xiphlacing
avcodec_align_dimensions
avcodec_align_dimensions2
avcodec_alloc_context3
avcodec_chroma_pos_to_enum
avcodec_close
avcodec_configuration
avcodec_copy_context
avcodec_dct_alloc
avcodec_dct_get_class
avcodec_dct_init
avcodec_decode_audio4
avcodec_decode_subtitle2
avcodec_decode_video2
avcodec_default_execute
avcodec_default_execute2
avcodec_default_get_buffer2
avcodec_default_get_format
avcodec_descriptor_get
avcodec_descriptor_get_by_name
avcodec_descriptor_next
avcodec_enum_to_chroma_pos
avcodec_fill_audio_frame
avcodec_find_best_pix_fmt2
avcodec_find_best_pix_fmt_of_2
avcodec_find_best_pix_fmt_of_list
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_find_encoder
avcodec_find_encoder_by_name
avcodec_flush_buffers
avcodec_free_context
avcodec_get_chroma_sub_sample
avcodec_get_class
avcodec_get_context_defaults3
avcodec_get_edge_width
avcodec_get_frame_class
avcodec_get_name
avcodec_get_pix_fmt_loss
avcodec_get_subtitle_rect_class
avcodec_get_type
avcodec_is_open
avcodec_license
avcodec_open2
avcodec_pix_fmt_to_codec_tag
avcodec_register
avcodec_register_all
avcodec_set_dimensions
avcodec_string
avcodec_version
avpicture_alloc
avpicture_fill
avpicture_free
avpicture_get_size
avpicture_layout
avpriv_pix_fmt_bps_avi
avpriv_pix_fmt_bps_mov
avsubtitle_free

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53257a2f4cb1ec6d076440864c8e0e39

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

09:e6:5a:d8:07:b8:49:7b:07:49:d4:15:68:d6:26:d0Certificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

84:4d:c2:cf:17:0f:f7:a7:25:81:35:f2:47:b4:83:d7:9b:e9:2d:27Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mozavutil

kernel32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 115KB - Virtual size: 114KB

.data Size: 512B - Virtual size: 1KB

.rodata Size: 23KB - Virtual size: 22KB

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 44KB - Virtual size: 43KB

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

09:e6:5a:d8:07:b8:49:7b:07:49:d4:15:68:d6:26:d0
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

84:4d:c2:cf:17:0f:f7:a7:25:81:35:f2:47:b4:83:d7:9b:e9:2d:27
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 115KB - Virtual size: 114KB

.data
Size: 512B - Virtual size: 1KB

.rodata
Size: 23KB - Virtual size: 22KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 44KB - Virtual size: 43KB