757fe02f00deb7f9145ccaf1ad935d5256452bdd2092c49631cc6e2f6eedc07bN

Sharing

Copy URL Twitter E-mail

General

Target

757fe02f00deb7f9145ccaf1ad935d5256452bdd2092c49631cc6e2f6eedc07bN
Size

1.2MB
MD5

cc5fa8963af1fddfa983aa30a880e610
SHA1

5ea22a79e59eab43d467fe97bcd31f5fda6b738e
SHA256

757fe02f00deb7f9145ccaf1ad935d5256452bdd2092c49631cc6e2f6eedc07b
SHA512

63fcc0f6db5e6096dbb96892853349a2ca5b6afd7e5f814a76504a4dde04746cb34334b47e2953a42a729742c010f001c7ecc086f4cbc43d9ef76fc605aea384
SSDEEP

24576:IxA6IrCryvKD8/+yOeYQgB7V1ZUwVyXeI6ueWac89yq7h4MkTvjadzPqk:Ie+5D8GbB7ByXLac89Vh4MkTvjadbq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
757fe02f00deb7f9145ccaf1ad935d5256452bdd2092c49631cc6e2f6eedc07bN

Files

757fe02f00deb7f9145ccaf1ad935d5256452bdd2092c49631cc6e2f6eedc07bN
.dll windows:4 windows x86 arch:x86

e84b10dd8c268204a8f187ea0b7a4d51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_APPCONTAINER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libvlccore

block_Alloc
date_Get
date_Increment
date_Init
date_Set
es_format_Init
vlc_Log
vlc_meta_Set
vlc_stream_Peek
vlc_stream_Read
vlc_stream_vaControl

msvcr120_app

___lc_codepage_func
___mb_cur_max_func
__doserrno
__pioinfo
__setusermatherr
_amsg_exit
_errno
_exit
_filelengthi64
_fileno
_fstat64
_get_output_format
_initterm
_iob
_lock
_lseeki64
_snwprintf
_stricmp
_strnicmp
_time32
_unlock
_write
abort
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fputs
fread
free
fsetpos
fwprintf
fwrite
getc
getwc
isspace
iswctype
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
printf
putc
putwc
rand
realloc
setlocale
setvbuf
sprintf
srand
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncmp
strncpy
strtoul
strxfrm
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
_write
_read
_open
_fileno
_fdopen
_close

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsDeleteString

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-synch-l1-2-0

CreateSemaphoreExW
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
ReleaseSemaphore
WaitForSingleObjectEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-errorhandling-l1-1-1

GetLastError
SetLastError

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId

api-ms-win-core-fibers-l1-1-1

FlsAlloc
FlsFree
FlsGetValue
FlsSetValue

api-ms-win-core-sysinfo-l1-2-1

GetSystemTimeAsFileTime
GetTickCount64

api-ms-win-core-localization-l1-2-1

GetCPInfo

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-memory-l1-1-2

VirtualQuery

api-ms-win-core-debug-l1-1-1

OutputDebugStringW

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

Exports

Exports

vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f

Sections

.text
Size: 919KB - Virtual size: 919KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e84b10dd8c268204a8f187ea0b7a4d51

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

msvcr120_app

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-fibers-l1-1-1

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-localization-l1-2-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-memory-l1-1-2

api-ms-win-core-debug-l1-1-1

api-ms-win-core-libraryloader-l1-2-0

Exports

Exports

Sections

.text Size: 919KB - Virtual size: 919KB

.data Size: 136KB - Virtual size: 135KB

.rdata Size: 96KB - Virtual size: 95KB

.bss Size: - Virtual size: 4KB

.edata Size: 512B - Virtual size: 160B

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 36KB - Virtual size: 35KB

.text
Size: 919KB - Virtual size: 919KB

.data
Size: 136KB - Virtual size: 135KB

.rdata
Size: 96KB - Virtual size: 95KB

.bss
Size: - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 160B

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 36KB - Virtual size: 35KB