0df3ad859e156367110450deb26837b6ec224c4fec73269a65447e2096e112f1N

Sharing

Copy URL Twitter E-mail

General

Target

0df3ad859e156367110450deb26837b6ec224c4fec73269a65447e2096e112f1N
Size

121KB
MD5

2379f40c57688d6eca538762e8bb6d80
SHA1

2e8b34d244c10c1aff2801dfd97334fb8eec2f04
SHA256

0df3ad859e156367110450deb26837b6ec224c4fec73269a65447e2096e112f1
SHA512

2395133b24ecf59c936e5358bd231f25e32e698c8a716f7e96b43bcdc18d8d964f2fe8469969491e659ef93626978d80b98751b5c41951fc404f47f2bfa09365
SSDEEP

1536:qs22OYD+gh7qZDa+FMOKGgUlds+V19odonwU1BRbWi9vyYHPY6TbW4XyDEgN3:Z6K8IhGgUbs+V1hnwU1bbWmvyYHPXfv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0df3ad859e156367110450deb26837b6ec224c4fec73269a65447e2096e112f1N

Files

0df3ad859e156367110450deb26837b6ec224c4fec73269a65447e2096e112f1N
.dll windows:4 windows x86 arch:x86

423b5bc3d5ddaee2477111e4a6fb2f95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libvlccore

config_FindConfig
msg_Generic
picture_NewFromFormat
picture_NewFromResource
picture_pool_Delete
picture_pool_NewExtended
pl_Get
var_AddCallback
var_Change
var_Create
var_DelCallback
var_GetChecked
var_Inherit
var_SetChecked
vlc_clone
vlc_cond_destroy
vlc_cond_init
vlc_cond_signal
vlc_cond_wait
vlc_fourcc_AreUVPlanesSwapped
vlc_fourcc_GetYUVFallback
vlc_fourcc_IsYUV
vlc_gettext
vlc_join
vlc_mutex_destroy
vlc_mutex_init
vlc_mutex_lock
vlc_mutex_unlock
vlc_plugin_set
vlc_restorecancel
vlc_savecancel
vout_display_PlacePicture
vout_window_Control

gdi32

CreateSolidBrush
GetPixel
GetStockObject

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetVersionExA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_strdup
__dllonexit
__lc_codepage
__mb_cur_max
_errno
_iob
_snprintf
abort
calloc
fflush
fgetc
fputc
free
fwrite
getenv
gmtime
localeconv
localtime
malloc
mbstowcs
memchr
memcpy
realloc
strchr
strcmp
strlen
strpbrk
strspn
tolower
toupper
vfprintf
wcslen

ole32

CoCreateInstance
CoInitialize
CoUninitialize

shell32

ExtractIconA

user32

AdjustWindowRect
AppendMenuA
CheckMenuItem
ClientToScreen
CreateCursor
CreateWindowExA
DefWindowProcA
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageA
EqualRect
FindWindowA
FindWindowExA
GetAncestor
GetClientRect
GetCursorPos
GetKeyState
GetMenuState
GetMessageA
GetMonitorInfoA
GetSystemMenu
GetSystemMetrics
GetWindowLongA
GetWindowPlacement
GetWindowRect
IntersectRect
InvalidateRect
LoadCursorA
MapVirtualKeyA
MonitorFromWindow
OffsetRect
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseCapture
SendMessageA
SetCapture
SetClassLongA
SetCursor
SetCursorPos
SetForegroundWindow
SetParent
SetRectEmpty
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoA
TranslateMessage
UnregisterClassA
UpdateWindow
ValidateRect
WindowFromPoint

Exports

Exports

vlc_entry__1_1_0g
vlc_entry_copyright__1_1_0g
vlc_entry_license__1_1_0g

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gnu_deb
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

423b5bc3d5ddaee2477111e4a6fb2f95

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

gdi32

kernel32

msvcrt

ole32

shell32

user32

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 51KB

.data Size: 512B - Virtual size: 32B

.rdata Size: 5KB - Virtual size: 5KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 164B

.idata Size: 4KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 1KB

.gnu_deb Size: 56KB - Virtual size: 56KB

.text
Size: 51KB - Virtual size: 51KB

.data
Size: 512B - Virtual size: 32B

.rdata
Size: 5KB - Virtual size: 5KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 164B

.idata
Size: 4KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 1KB

.gnu_deb
Size: 56KB - Virtual size: 56KB