The ffmpeg dll File Malware Analysis

Technical Analysis

File Name	ffmpeg.dll
File Type	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Scanner Version	1.0.210.174
Database Version	2025-03-07 17:00:39 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	13dbfbd98d49e611ecf838553c150f15
SHA1	0d94d6bfe19148e75e8ae789dead5d6d2dcc2a33
SHA256	33b4570cb6b984db982416c0a434f70f8c337adc48cb45bfc687dbb67843beeb
SHA512	bf1c0a8cf1f81a4441c3792fd947d3e48cdac493042a6f81a32010096575745765299af4f314f1665357b3e303a565a9294460e5e2665a89c7d453746501f85a
ImpHash	8b2be6e82e1a2f5b6a6ac4ed9979b98b

PE Analysis

Basic Information

▼

Image Base	`0x6d000000`
Entry Point	`0x6d001420`
Compilation Time	2013-11-13 18:17:32
Checksum	0x003e1078 (Actual: 0x003e1078)
OS Version	4.0
PEiD Signatures	`PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	3 libraries KERNEL32, msvcrt, USER32
Exports	68 functions
Resources	0 Resources
Sections	12 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	3,085,136 bytes	3,085,312 bytes	6.52 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_128BYTES`	`33E914286D7722289C4E5AF0515E62A0`
`.data`	`0x002f3000`	84,608 bytes	84,992 bytes	2.28 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_32BYTES`	`6F88E369583D72E39D9D7B0B35ACB8DB`
`.rdata`	`0x00308000`	688,544 bytes	688,640 bytes	6.50 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_32BYTES`	`07B3A22EE14C9F61992DC111D00CBC7C`
`.rodata`	`0x003b1000`	4,992 bytes	5,120 bytes	5.04 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_32BYTES`	`A16AB70C1216E7A2CF1A4D6839C3B1D2`
`.pdata`	`0x003b3000`	59,928 bytes	60,416 bytes	6.14 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`690C613B18A5B9E66968C1FC9E478CBD`
`.xdata`	`0x003c2000`	66,676 bytes	67,072 bytes	4.51 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`F2303D233BE7891DD18726AB0051C921`
`.bss`	`0x003d3000`	4,735,840 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_32BYTES`	`D41D8CD98F00B204E9800998ECF8427E`
`.edata`	`0x00858000`	2,036 bytes	2,048 bytes	5.56 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`968F7ADDB0B0739CA0B49622BC1BED45`
`.idata`	`0x00859000`	3,884 bytes	4,096 bytes	4.26 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_4BYTES`	`C311CA0F0CB89250A049509B0707AC19`
`.CRT`	`0x0085a000`	88 bytes	512 bytes	0.19 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_8BYTES`	`9BFA4B7EDC7F8D26430A06AEAA838F87`
`.tls`	`0x0085b000`	80 bytes	512 bytes	0.29 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_32BYTES`	`D2D2F44606AC9FEE0B438FEE8933C86F`
`.reloc`	`0x0085c000`	9,816 bytes	10,240 bytes	6.09 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`858CFF8CAE50E9213792306F1010747D`

Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The ffmpeg.dll File Analysis