f25982722025c1a7795c5b3ce179c1d44f016a776ca47ecbd07622fe8b87f7e4N

Sharing

Copy URL Twitter E-mail

General

Target

f25982722025c1a7795c5b3ce179c1d44f016a776ca47ecbd07622fe8b87f7e4N
Size

696KB
MD5

2ee6c4b1601a917b5c77a2e52206bda0
SHA1

245fdb829094e1ff3df5e8a1b4e04df9113c7f2d
SHA256

f25982722025c1a7795c5b3ce179c1d44f016a776ca47ecbd07622fe8b87f7e4
SHA512

f72cbd1ac0b5f42b9b4b620922c2d5a9045ef958ef1547d70e96582c15c3f4872a01758c9bd188fd2cb62f4d3c4f3250e30cf08f8cc85ae93990d8a103102940
SSDEEP

12288:PjVpo57H5UhltVrqvfCsr/cDJ/ifCm48OpMBk5J6SaTf76rJ:rVpoNH5Uhlt8vfCsr/8Z8PBAJtaTf76t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f25982722025c1a7795c5b3ce179c1d44f016a776ca47ecbd07622fe8b87f7e4N

Files

f25982722025c1a7795c5b3ce179c1d44f016a776ca47ecbd07622fe8b87f7e4N
.dll windows:4 windows x86 arch:x86

e9c22b215654f540004a933f7d4e74c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_APPCONTAINER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libvlccore

access_vaDirectoryControlHelper
config_GetUserDir
net_Connect
var_Inherit
vlc_Log
vlc_UrlClean
vlc_UrlParseFixup
vlc_credential_clean
vlc_credential_get
vlc_credential_init
vlc_credential_store
vlc_gettext
vlc_obj_calloc
vlc_path2uri
vlc_readdir_helper_additem
vlc_readdir_helper_finish
vlc_readdir_helper_init
vlc_uri_decode_duplicate
vlc_uri_encode

msvcr120_app

___lc_codepage_func
___mb_cur_max_func
_amsg_exit
_errno
_exit
_fstat32
_get_output_format
_initterm
_iob
_lock
_lseeki64
_open_osfhandle
_snwprintf
_time32
_unlock
abort
atoi
calloc
clock
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputc
fread
free
fseek
ftell
_vsnprintf
fwprintf
fwrite
iscntrl
isspace
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
realloc
rewind
sprintf
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strpbrk
strrchr
strspn
strstr
strtoul
vfprintf
wcscpy
wcslen
_write
_stricmp
_strdup
_setmode
_read
_open
_fileno
_close
_access

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsDeleteString

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-synch-l1-2-0

CreateEventExW
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
ResetEvent
SetEvent
TryEnterCriticalSection
WaitForSingleObjectEx

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-heap-l1-2-0

GetProcessHeap
HeapAlloc
HeapFree

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-errorhandling-l1-1-1

GetLastError
SetLastError

api-ms-win-core-processthreads-l1-1-2

CreateThread
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-fibers-l1-1-1

FlsAlloc
FlsFree
FlsGetValue
FlsSetValue

api-ms-win-core-sysinfo-l1-2-1

GetSystemTimeAsFileTime
GetTickCount64

api-ms-win-core-localization-l1-2-1

GetCPInfo

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-memory-l1-1-2

VirtualQuery

api-ms-win-core-file-l1-2-1

CreateDirectoryW
CreateFile2
GetTempPathW
ReadFile
SetFilePointerEx
WriteFile

api-ms-win-core-timezone-l1-1-0

GetTimeZoneInformation

api-ms-win-core-debug-l1-1-1

OutputDebugStringW

api-ms-win-core-file-l2-1-1

GetFileInformationByHandleEx

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameW
GetProcAddress

ws2_32

WSAGetLastError
__WSAFDIsSet
closesocket
getsockopt
ioctlsocket
recv
select
send

Exports

Exports

vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f

Sections

.text
Size: 553KB - Virtual size: 553KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9c22b215654f540004a933f7d4e74c6

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

msvcr120_app

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-heap-l1-2-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-synch-l1-2-1

api-ms-win-core-fibers-l1-1-1

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-localization-l1-2-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-memory-l1-1-2

api-ms-win-core-file-l1-2-1

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-debug-l1-1-1

api-ms-win-core-file-l2-1-1

api-ms-win-core-libraryloader-l1-2-0

ws2_32

Exports

Exports

Sections

.text Size: 553KB - Virtual size: 553KB

.data Size: 6KB - Virtual size: 6KB

.rdata Size: 112KB - Virtual size: 112KB

.bss Size: - Virtual size: 4KB

.edata Size: 512B - Virtual size: 161B

.idata Size: 5KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 553KB - Virtual size: 553KB

.data
Size: 6KB - Virtual size: 6KB

.rdata
Size: 112KB - Virtual size: 112KB

.bss
Size: - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 161B

.idata
Size: 5KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 15KB - Virtual size: 14KB