38b1a1e06173bb178cf41268a002a70de8b752e521581953fa1fdcd6dff68635N

Sharing

Copy URL Twitter E-mail

General

Target

38b1a1e06173bb178cf41268a002a70de8b752e521581953fa1fdcd6dff68635N
Size

175KB
MD5

6089775bc04f0b4fdd6da6def5f95fc0
SHA1

798a63343abce5c05f34be7aa3bde0e83bb40f06
SHA256

38b1a1e06173bb178cf41268a002a70de8b752e521581953fa1fdcd6dff68635
SHA512

a86eaa81a8996c67a40bd09b03c163d9ecb96fff7358967b01a15a2474339eb7ac21018f6643eb9f331fa7094ddbb71b5b6ef558c669b15e3ebe492fc39de2c7
SSDEEP

3072:n1FtDoRxelc+eIPmNw/NUsmE5T38K+shJh7xeoN9K:1FJc+eIP7PT38K+sPh7xeoN9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38b1a1e06173bb178cf41268a002a70de8b752e521581953fa1fdcd6dff68635N

Files

38b1a1e06173bb178cf41268a002a70de8b752e521581953fa1fdcd6dff68635N
.dll windows:4 windows x64 arch:x64

e2b1029853fbb55956fc5176cd53f84b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libgcc_s_seh-1

_Unwind_Resume

libgomp-1

GOMP_parallel
omp_get_max_threads
omp_get_num_threads
omp_get_thread_num

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
__setusermatherr
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
acos
calloc
free
fwrite
malloc
memcpy
realloc
strlen
strncmp
vfprintf

libwinpthread-1

pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock

libstdc++-6

_ZNKSt5ctypeIcE13_M_widen_initEv
_ZNSi4readEPcx
_ZNSi5seekgESt4fposIiE
_ZNSi5seekgExSt12_Ios_Seekdir
_ZNSi5tellgEv
_ZNSo3putEc
_ZNSo5flushEv
_ZNSo9_M_insertIyEERSoT_
_ZNSt13basic_filebufIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode
_ZNSt13basic_filebufIcSt11char_traitsIcEE5closeEv
_ZNSt13basic_filebufIcSt11char_traitsIcEEC1Ev
_ZNSt13basic_filebufIcSt11char_traitsIcEED1Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEyyPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_assignERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERyy
_ZNSt8ios_baseC2Ev
_ZNSt8ios_baseD2Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E
_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate
_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_x
_ZSt16__throw_bad_castv
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt20__throw_system_errori
_ZSt28__throw_bad_array_new_lengthv
_ZSt4cout
_ZTTSt14basic_ifstreamIcSt11char_traitsIcEE
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZTVSt14basic_ifstreamIcSt11char_traitsIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZdaPv
_ZdlPv
_Znay
_Znwy
__cxa_begin_catch
__cxa_end_catch
__cxa_rethrow
__cxa_throw_bad_array_new_length
__gxx_personality_seh0

Exports

Exports

_Z10decomposeQRK6MatrixILj1ELj4EERKS_ILj1ELj3EERS0_S6_
_Z10int64BlerpPKjiiiiiiii
_Z13apply_360_mapPjS_Pfiiiii
_Z13transform_360RK19Transform360SupportPjS2_iiiiRK6MatrixILj3ELj3EEi
_Z13transform_360RK19Transform360SupportPjS2_iiiidddi
_Z14sampleBilinearPKjddii
_Z16rotateQuaternionR6MatrixILj3ELj3EERKS_ILj1ELj4EE
_Z17transform_360_mapRK19Transform360SupportPfiiiiddd
_Z18transform_360_tmplILi0EEvRK19Transform360SupportPjS3_iiiiRK6MatrixILj3ELj3EE
_Z18transform_360_tmplILi1EEvRK19Transform360SupportPjS3_iiiiRK6MatrixILj3ELj3EE
_Z28sampleBilinearWrappedClampedPKjddii
_Z5mulQQRK6MatrixILj1ELj4EES2_RS0_
_Z6mulV3SRK6MatrixILj1ELj3EEdRS0_
_Z6smoothRSt6vectorIdSaIdEEid
_Z7addV3V3RK6MatrixILj1ELj3EES2_RS0_
_Z7dotV3V3RK6MatrixILj1ELj3EES2_
_Z7dumpSSEPcDv2_x
_Z7invertQRK6MatrixILj1ELj4EERS0_
_Z7mulM3V3RK6MatrixILj3ELj3EERKS_ILj1ELj3EERS3_
_Z7rotateXR6MatrixILj3ELj3EEd
_Z7rotateYR6MatrixILj3ELj3EEd
_Z7rotateZR6MatrixILj3ELj3EEd
_Z8sseBlerpPKjiiiiiiii
_Z9crossV3V3RK6MatrixILj1ELj3EES2_RS0_
_Z9fastAtan2dd
_Z9rotateQV3RK6MatrixILj1ELj4EERKS_ILj1ELj3EERS3_
_ZN12Frei0rFilter15register_fparamER15Frei0rParameterIddEPKcS4_
_ZN19Transform360SupportC1Eii
_ZN19Transform360SupportC2Eii
_ZN19Transform360SupportD1Ev
_ZN19Transform360SupportD2Ev
_ZN6EqMask11updateLinesEdPjPKjii
_ZN6EqMask6updateEdPjPKj
_ZN6EqMaskD0Ev
_ZN6EqMaskD1Ev
_ZN6frei0r2fxD2Ev
_ZN6frei0r6filter11effect_typeEv
_ZN6frei0r6filter6updateEdPjPKjS3_S3_
_ZN6frei0r9constructI6EqMaskE5buildEjj
_ZN8Graphics4plotEiijj
_ZN8Graphics8drawRectEiiiijj
_ZN8Graphics8drawTextEiiRKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEjj
_ZN8Graphics8fillRectEiiiijj
_ZN8GraphicsC1EPjii
_ZN8GraphicsC2EPjii
_ZN8GraphicsD1Ev
_ZN8GraphicsD2Ev
_ZN8MPFilter8updateMPEPS_dPjPKjii
_ZN8MPSource8updateMPEPS_dPjii
_ZN9MP4Parser10readUInt32Ev
_ZN9MP4Parser10readUInt64Ev
_ZN9MP4Parser11getDurationEv
_ZN9MP4Parser12readUInt16LEEv
_ZN9MP4Parser12readUInt32LEEv
_ZN9MP4Parser13readFloat32LEEv
_ZN9MP4Parser14readZenithDataERSt6vectorI6MatrixILj1ELj4EESaIS2_EE
_ZN9MP4Parser4findEPK7MP4Atomj
_ZN9MP4Parser4listEPK7MP4Atom
_ZN9MP4Parser4seekERK7MP4Atom
_ZN9MP4Parser4skipERK7MP4Atom
_ZN9MP4Parser5closeEv
_ZN9MP4Parser5validEv
_ZN9MP4Parser8readAtomEv
_ZN9MP4Parser8readRDT5ERSt6vectorI6MatrixILj1ELj4EESaIS2_EE
_ZN9MP4Parser8readRDTHERSt6vectorI6MatrixILj1ELj4EESaIS2_EE
_ZN9MP4Parser9readInt16Ev
_ZN9MP4Parser9readUInt8Ev
_ZN9MP4ParserC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN9MP4ParserC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZNKSt5ctypeIcE8do_widenEc
_ZNSt6vectorI6MatrixILj1ELj4EESaIS1_EE17_M_realloc_appendIJRKS1_EEEvDpOT_
_ZNSt6vectorIN6frei0r10param_infoESaIS1_EE17_M_realloc_appendIJS1_EEEvDpOT_
_ZNSt6vectorIdSaIdEE17_M_realloc_appendIJRKdEEEvDpOT_
_ZTI12Frei0rFilter
_ZTI6EqMask
_ZTI8MPFilter
_ZTIN6frei0r2fxE
_ZTIN6frei0r6filterE
_ZTS12Frei0rFilter
_ZTS6EqMask
_ZTS8MPFilter
_ZTSN6frei0r2fxE
_ZTSN6frei0r6filterE
_ZTV6EqMask
_ZTVN6frei0r2fxE
_ZTVN6frei0r6filterE
_ZThn72_N6EqMask11updateLinesEdPjPKjii
f0r_construct
f0r_deinit
f0r_destruct
f0r_get_param_info
f0r_get_param_value
f0r_get_plugin_info
f0r_init
f0r_set_param_value
f0r_update
f0r_update2
font8x8_basic
plugin

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 448B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2b1029853fbb55956fc5176cd53f84b

Headers

DLL Characteristics

File Characteristics

Imports

libgcc_s_seh-1

libgomp-1

kernel32

msvcrt

libwinpthread-1

libstdc++-6

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 39KB

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 3KB

.pdata Size: 2KB - Virtual size: 1KB

.xdata Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 448B

.edata Size: 4KB - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 156B

/4 Size: 1KB - Virtual size: 1KB

/19 Size: 33KB - Virtual size: 33KB

/31 Size: 7KB - Virtual size: 7KB

/45 Size: 7KB - Virtual size: 7KB

/57 Size: 2KB - Virtual size: 2KB

/70 Size: 512B - Virtual size: 412B

/81 Size: 5KB - Virtual size: 4KB

/97 Size: 5KB - Virtual size: 5KB

/113 Size: 512B - Virtual size: 486B

.text
Size: 39KB - Virtual size: 39KB

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 3KB

.pdata
Size: 2KB - Virtual size: 1KB

.xdata
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 448B

.edata
Size: 4KB - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 156B

/4
Size: 1KB - Virtual size: 1KB

/19
Size: 33KB - Virtual size: 33KB

/31
Size: 7KB - Virtual size: 7KB

/45
Size: 7KB - Virtual size: 7KB

/57
Size: 2KB - Virtual size: 2KB

/70
Size: 512B - Virtual size: 412B

/81
Size: 5KB - Virtual size: 4KB

/97
Size: 5KB - Virtual size: 5KB

/113
Size: 512B - Virtual size: 486B