19b5cbcc9d3c70b4ba9a0d1ec0b38b4f0f19ba0f2d458face3bd293fa04e8198N

Sharing

Copy URL Twitter E-mail

General

Target

19b5cbcc9d3c70b4ba9a0d1ec0b38b4f0f19ba0f2d458face3bd293fa04e8198N
Size

662KB
MD5

d11424cc9f714572013a764fff552b10
SHA1

b6e77f8d22c0aed830778ccb455f52f17b166d6b
SHA256

19b5cbcc9d3c70b4ba9a0d1ec0b38b4f0f19ba0f2d458face3bd293fa04e8198
SHA512

14ec339c416316bfe11b7af824fac72cc40f44b0ff3bd698bd0ad857f598a938783de7013506d2f27ce90bb0b4ad859bcc2f2ba7e1b561576509a0ad770ca20d
SSDEEP

12288:EWJ6tCfhcT2RdAA8yVPqNk0nBj4/Dgb0D0uVz1bu5BnVop5u29/HAsk:ES6tCf648bQhRurnCp5u29/HAs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19b5cbcc9d3c70b4ba9a0d1ec0b38b4f0f19ba0f2d458face3bd293fa04e8198N

Files

19b5cbcc9d3c70b4ba9a0d1ec0b38b4f0f19ba0f2d458face3bd293fa04e8198N
.dll windows:4 windows x64 arch:x64

cb19e0e5801fd073bdb18edd4d038363

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetProcessAffinityMask
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount64
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
OpenProcess
OutputDebugStringA
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
Sleep
SuspendThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
__C_specific_handler

msvcrt

__iob_func
__setusermatherr
_amsg_exit
_beginthreadex
_endthreadex
_errno
_exit
_initterm
_lock
_setjmp
_ultoa
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memmove
memset
printf
realloc
signal
strlen
strncmp
vfprintf
longjmp
_write
_strdup
_open
_close

avutil-57

av_calloc
av_fast_malloc
av_fast_realloc
av_frame_alloc
av_frame_free
av_frame_get_buffer
av_frame_ref
av_frame_unref
av_free
av_freep
av_get_bits_per_pixel
av_get_cpu_flags
av_get_pix_fmt_name
av_image_alloc
av_log
av_malloc
av_malloc_array
av_mallocz
av_opt_copy
av_opt_get_int
av_opt_set_defaults
av_opt_set_int
av_pix_fmt_desc_get
av_pix_fmt_get_chroma_sub_sample
av_pix_fmt_swap_endianness
avpriv_slicethread_create
avpriv_slicethread_execute
avpriv_slicethread_free

Exports

Exports

sws_allocVec
sws_alloc_context
sws_alloc_set_opts
sws_convertPalette8ToPacked24
sws_convertPalette8ToPacked32
sws_frame_end
sws_frame_start
sws_freeContext
sws_freeFilter
sws_freeVec
sws_getCachedContext
sws_getCoefficients
sws_getColorspaceDetails
sws_getContext
sws_getDefaultFilter
sws_getGaussianVec
sws_get_class
sws_init_context
sws_isSupportedEndiannessConversion
sws_isSupportedInput
sws_isSupportedOutput
sws_normalizeVec
sws_receive_slice
sws_receive_slice_alignment
sws_scale
sws_scaleVec
sws_scale_frame
sws_send_slice
sws_setColorspaceDetails
swscale_configuration
swscale_license
swscale_version

Sections

.text
Size: 597KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb19e0e5801fd073bdb18edd4d038363

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

avutil-57

Exports

Exports

Sections

.text Size: 597KB - Virtual size: 596KB

.data Size: 512B - Virtual size: 208B

.rdata Size: 28KB - Virtual size: 28KB

.pdata Size: 11KB - Virtual size: 11KB

.xdata Size: 15KB - Virtual size: 14KB

.bss Size: - Virtual size: 32KB

.edata Size: 1024B - Virtual size: 984B

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 597KB - Virtual size: 596KB

.data
Size: 512B - Virtual size: 208B

.rdata
Size: 28KB - Virtual size: 28KB

.pdata
Size: 11KB - Virtual size: 11KB

.xdata
Size: 15KB - Virtual size: 14KB

.bss
Size: - Virtual size: 32KB

.edata
Size: 1024B - Virtual size: 984B

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 1KB - Virtual size: 1KB