b14b835f524a6942597bc8fab25f82a46ecab6811b70eb779c7132e225b88ff0N

Sharing

Copy URL Twitter E-mail

General

Target

b14b835f524a6942597bc8fab25f82a46ecab6811b70eb779c7132e225b88ff0N
Size

210KB
MD5

3e31801475a1e4494cdea6854bede7d0
SHA1

e85d268c890c1fa4cd10255b4bff7f23373a4b9d
SHA256

b14b835f524a6942597bc8fab25f82a46ecab6811b70eb779c7132e225b88ff0
SHA512

157f0158314e5f1be1b3d378b401abfe199b560fed38d06649b4733149efda60848077e1a22485812148422bf209ea2e939be1ee425d7f6b8ad36160f97b4734
SSDEEP

3072:57eL9zYYfYYYY1ohiTP63B9XqHVnYYoYXbtXUsg0KSVozxbVhJ153pJTP+jDsCk3:XiTJLUqozxbF153fTP+jDsNd5

Score

1^/10

Malware Config

Signatures

Files

b14b835f524a6942597bc8fab25f82a46ecab6811b70eb779c7132e225b88ff0N
.dll windows:6 windows x86 arch:x86

29cd59af34738e4f5069bc4c4737ef77

Code Sign

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/01/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:e8:32:2c:5a:0f:3b:81:75:be:2d:de:5b:77:f5:46
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

02/08/2024, 00:00

Not After

01/08/2025, 23:59

Subject

SERIALNUMBER=4152954,CN=Amazon Web Services\, Inc.,OU=AWS HPC and Visualization - NICE,O=Amazon Web Services\, Inc.,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d2:42:e8:a8:37:0c:89:9b:dc:52:cd:6e:3b:1d:2a:c3:3a:8d:24:c8:c4:c1:1c:e8:20:8c:26:3a:f3:26:f4:68
Signer

Actual PE Digest

d2:42:e8:a8:37:0c:89:9b:dc:52:cd:6e:3b:1d:2a:c3:3a:8d:24:c8:c4:c1:1c:e8:20:8c:26:3a:f3:26:f4:68

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\build\build\Win32\release\gst-plugins-bad\_gvsbuild-meson\gst-libs\gst\d3d11\gstd3d11-1.0-0.pdb

Imports

gstreamer-1.0-0

gst_object_unref
gst_object_ref_sink
gst_mini_object_unref
gst_structure_set
gst_structure_get
gst_buffer_new
gst_buffer_append_memory
gst_flow_get_name
gst_buffer_pool_get_type
gst_buffer_pool_config_set_params
gst_buffer_pool_config_get_params
gst_debug_log
_gst_debug_category_new
_gst_debug_min
gst_object_get_type
gst_memory_map
gst_memory_unmap
gst_structure_free
gst_structure_get_enum
gst_structure_get_flags
gst_buffer_n_memory
gst_buffer_peek_memory
gst_buffer_pool_set_active
gst_buffer_pool_set_config
gst_buffer_pool_get_config
gst_iterator_resync
gst_buffer_pool_acquire_buffer
_gst_query_type
_gst_debug_get_category
gst_element_post_message
gst_element_iterate_sink_pads
gst_element_iterate_src_pads
gst_element_set_context
gst_element_get_type
gst_pad_peer_query
gst_message_new_have_context
gst_message_new_need_context
gst_query_parse_context
gst_query_set_context
gst_query_parse_context_type
gst_query_new_context
gst_context_writable_structure
gst_context_get_structure
gst_context_get_context_type
gst_context_new
gst_iterator_fold
gst_iterator_free
gst_object_ref
gst_mini_object_copy
gst_poll_read_control
gst_poll_write_control
gst_poll_wait
gst_poll_free
gst_poll_new_timer
gst_value_register
gst_allocator_register
gst_allocator_get_type
gst_memory_init
gst_atomic_queue_length
gst_atomic_queue_pop
gst_atomic_queue_push
gst_atomic_queue_unref
gst_atomic_queue_new
gst_util_uint64_scale
gst_debug_category_get_threshold
gst_mini_object_ref
gst_mini_object_init
_gst_buffer_type

gobject-2.0-0

g_value_set_uint64
g_value_get_uint64
g_value_set_float
g_value_get_float
g_value_set_double
g_value_get_double
g_value_set_string
g_value_dup_string
g_value_set_pointer
g_value_get_pointer
g_boxed_type_register_static
g_param_spec_int64
g_value_set_int64
g_enum_register_static
g_value_init
g_object_get
g_value_get_object
g_type_class_peek_parent
g_value_set_boolean
g_param_spec_pointer
g_value_set_uint
g_param_spec_double
g_param_spec_float
g_param_spec_enum
g_param_spec_uint64
g_param_spec_uint
g_param_spec_int
g_param_spec_boolean
g_flags_register_static
g_value_get_enum
g_value_set_enum
g_flags_to_string
g_object_class_install_property
g_type_name
g_object_new
g_type_check_class_cast
g_type_check_instance_is_a
g_type_check_instance_cast
g_type_class_adjust_private_offset
g_type_add_instance_private
g_value_get_int
g_type_register_static_simple
g_value_get_uint
g_value_set_int
g_value_get_boolean
g_param_spec_string

glib-2.0-0

g_win32_error_message
g_strcmp0
g_atomic_int_add
g_atomic_int_dec_and_test
g_atomic_int_inc
g_atomic_int_set
g_atomic_int_get
g_utf16_to_utf8
g_malloc0_n
g_thread_yield
g_array_append_vals
g_array_unref
g_array_sized_new
g_assertion_message_expr
g_log
g_strdup_printf
g_strdup
g_free
g_return_if_fail_warning
g_once_init_leave
g_once_init_enter
g_intern_static_string

gstvideo-1.0-0

gst_video_info_from_caps
gst_video_alignment_reset
gst_buffer_add_video_meta_full
gst_video_gamma_mode_get_type
gst_video_primaries_mode_get_type
gst_video_format_to_string
gst_video_color_range_offsets
gst_video_color_matrix_get_Kr_Kb
gst_video_content_light_level_from_string
gst_video_mastering_display_info_from_string
gst_video_converter_frame
gst_video_converter_free
gst_video_converter_new
gst_video_frame_copy
gst_video_frame_unmap
gst_video_frame_map
gst_video_info_to_caps
gst_video_info_set_interlaced_format
gst_video_info_set_format
gst_video_transfer_function_is_equivalent
gst_video_color_primaries_is_equivalent
gst_video_color_primaries_get_info
gst_video_transfer_function_decode
gst_video_transfer_function_encode
gst_video_orientation_method_get_type

gmodule-2.0-0

g_module_symbol
g_module_close
g_module_open

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

kernel32

InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
VerSetConditionMask
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
CreateEventExA
VerifyVersionInfoW

msvcp140

?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_XGetLastError@std@@YAXXZ
_Mtx_init_in_situ
?__ExceptionPtrRethrow@@YAXPBX@Z
_Mtx_destroy_in_situ
_Mtx_lock
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list
__CxxFrameHandler3
__std_terminate

api-ms-win-crt-math-l1-1-0

_except1
rint

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_errno
_seh_filter_dll
_crt_atexit
_crt_at_quick_exit
_cexit
_initterm
_initterm_e
_execute_onexit_table
terminate
_register_onexit_function

api-ms-win-crt-heap-l1-1-0

free

Exports

Exports

_gst_d3d11_result
gst_buffer_pool_config_get_d3d11_allocation_params
gst_buffer_pool_config_set_d3d11_allocation_params
gst_d3d11_allocation_flags_get_type
gst_d3d11_allocation_params_alignment
gst_d3d11_allocation_params_copy
gst_d3d11_allocation_params_free
gst_d3d11_allocation_params_get_type
gst_d3d11_allocation_params_new
gst_d3d11_allocator_alloc
gst_d3d11_allocator_alloc_buffer
gst_d3d11_allocator_alloc_wrapped
gst_d3d11_allocator_get_type
gst_d3d11_allocator_set_active
gst_d3d11_buffer_pool_get_type
gst_d3d11_buffer_pool_new
gst_d3d11_color_primaries_matrix_unorm
gst_d3d11_color_range_adjust_matrix_unorm
gst_d3d11_compile
gst_d3d11_compile_init
gst_d3d11_context_new
gst_d3d11_converter_backend_get_type
gst_d3d11_converter_convert_buffer
gst_d3d11_converter_convert_buffer_unlocked
gst_d3d11_converter_get_type
gst_d3d11_converter_new
gst_d3d11_create_pixel_shader_simple
gst_d3d11_create_vertex_shader_simple
gst_d3d11_device_create_fence
gst_d3d11_device_get_device_context_handle
gst_d3d11_device_get_device_handle
gst_d3d11_device_get_dxgi_factory_handle
gst_d3d11_device_get_format
gst_d3d11_device_get_type
gst_d3d11_device_get_video_context_handle
gst_d3d11_device_get_video_device_handle
gst_d3d11_device_lock
gst_d3d11_device_new
gst_d3d11_device_new_for_adapter_luid
gst_d3d11_device_new_wrapped
gst_d3d11_device_unlock
gst_d3d11_dump_color_matrix
gst_d3d11_dxgi_format_get_alignment
gst_d3d11_dxgi_format_get_resource_format
gst_d3d11_dxgi_format_get_size
gst_d3d11_dxgi_format_to_gst
gst_d3d11_dxgi_format_to_string
gst_d3d11_ensure_element_data
gst_d3d11_ensure_element_data_for_adapter_luid
gst_d3d11_fence_get_type
gst_d3d11_fence_signal
gst_d3d11_fence_wait
gst_d3d11_format_init
gst_d3d11_handle_context_query
gst_d3d11_handle_set_context
gst_d3d11_handle_set_context_for_adapter_luid
gst_d3d11_luid_to_int64
gst_d3d11_memory_get_buffer_desc
gst_d3d11_memory_get_decoder_output_view
gst_d3d11_memory_get_native_type
gst_d3d11_memory_get_processor_input_view
gst_d3d11_memory_get_processor_output_view
gst_d3d11_memory_get_render_target_view
gst_d3d11_memory_get_render_target_view_size
gst_d3d11_memory_get_resource_handle
gst_d3d11_memory_get_resource_stride
gst_d3d11_memory_get_shader_resource_view
gst_d3d11_memory_get_shader_resource_view_size
gst_d3d11_memory_get_subresource_index
gst_d3d11_memory_get_texture_desc
gst_d3d11_memory_init_once
gst_d3d11_memory_native_type_get_type
gst_d3d11_memory_transfer_get_type
gst_d3d11_pool_allocator_acquire_memory
gst_d3d11_pool_allocator_get_pool_size
gst_d3d11_pool_allocator_get_type
gst_d3d11_pool_allocator_new
gst_d3d11_rgb_to_yuv_matrix_unorm
gst_d3d11_yuv_to_rgb_matrix_unorm
gst_is_d3d11_memory
gst_video_info_apply_dxgi_color_space
gst_video_info_to_dxgi_color_space

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29cd59af34738e4f5069bc4c4737ef77

Code Sign

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0d:e8:32:2c:5a:0f:3b:81:75:be:2d:de:5b:77:f5:46Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

d2:42:e8:a8:37:0c:89:9b:dc:52:cd:6e:3b:1d:2a:c3:3a:8d:24:c8:c4:c1:1c:e8:20:8c:26:3a:f3:26:f4:68Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gstreamer-1.0-0

gobject-2.0-0

glib-2.0-0

gstvideo-1.0-0

gmodule-2.0-0

d3d11

dxgi

kernel32

msvcp140

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 115KB

.rdata Size: 67KB - Virtual size: 67KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 11KB - Virtual size: 11KB

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0d:e8:32:2c:5a:0f:3b:81:75:be:2d:de:5b:77:f5:46
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

d2:42:e8:a8:37:0c:89:9b:dc:52:cd:6e:3b:1d:2a:c3:3a:8d:24:c8:c4:c1:1c:e8:20:8c:26:3a:f3:26:f4:68
Signer

.text
Size: 116KB - Virtual size: 115KB

.rdata
Size: 67KB - Virtual size: 67KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 11KB