b9d6863a0bf0bf33c25370818dfefdd470775fb1ebd6b8fa0fcb031b99a4816aN

Sharing

Copy URL Twitter E-mail

General

Target

b9d6863a0bf0bf33c25370818dfefdd470775fb1ebd6b8fa0fcb031b99a4816aN
Size

164KB
MD5

71e6e4b51775348954efcb825153ea60
SHA1

8e70b36fcaf711d00b10bb559b4b2c238fbe4223
SHA256

b9d6863a0bf0bf33c25370818dfefdd470775fb1ebd6b8fa0fcb031b99a4816a
SHA512

30ceff38e6dd7ff7e8b31718c1e137d9587ef72a473d81e1d84b74622a01d851b3b2ba2394d922e6f39848631230e2e9143d29dd36b583705e5d46901c350017
SSDEEP

3072:NB6DPMc3JVlwdvjWyyyyyKwVlF1maFzrWPPPPP4by6iROmROQvkb2qnPHOZ:NB6DPp5gvjWyyyyyKwVlF1maFzrWPPPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9d6863a0bf0bf33c25370818dfefdd470775fb1ebd6b8fa0fcb031b99a4816aN

Files

b9d6863a0bf0bf33c25370818dfefdd470775fb1ebd6b8fa0fcb031b99a4816aN
.dll windows:4 windows x86 arch:x86

cc64220932d58910c0de1eb8be4b3849

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_APPCONTAINER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libvlccore

config_ChainParse
picture_Copy
picture_CopyProperties
picture_Hold
picture_Release
plane_CopyPixels
var_GetChecked
var_Inherit
vlc_CPU
vlc_Log
vlc_fourcc_GetChromaDescription

msvcr120_app

_amsg_exit
_exit
_initterm
_iob
_lock
_snwprintf
_unlock
abort
calloc
free
fwrite
malloc
memcpy
realloc
strlen
strncmp
vfprintf
wcslen
_write
_open
_close

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsDeleteString

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-synch-l1-2-0

DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
WaitForSingleObjectEx

api-ms-win-core-errorhandling-l1-1-1

GetLastError
SetLastError

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId

api-ms-win-core-fibers-l1-1-1

FlsAlloc
FlsFree
FlsGetValue
FlsSetValue

api-ms-win-core-sysinfo-l1-2-1

GetSystemTimeAsFileTime
GetTickCount64

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-memory-l1-1-2

VirtualQuery

api-ms-win-core-debug-l1-1-1

OutputDebugStringW

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress

Exports

Exports

vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 960B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc64220932d58910c0de1eb8be4b3849

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

msvcr120_app

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-fibers-l1-1-1

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-memory-l1-1-2

api-ms-win-core-debug-l1-1-1

api-ms-win-core-libraryloader-l1-2-0

Exports

Exports

Sections

.text Size: 144KB - Virtual size: 143KB

.data Size: 512B - Virtual size: 112B

.rdata Size: 10KB - Virtual size: 10KB

.bss Size: - Virtual size: 960B

.edata Size: 512B - Virtual size: 168B

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 144KB - Virtual size: 143KB

.data
Size: 512B - Virtual size: 112B

.rdata
Size: 10KB - Virtual size: 10KB

.bss
Size: - Virtual size: 960B

.edata
Size: 512B - Virtual size: 168B

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 3KB - Virtual size: 2KB