49e07a6a0c70f8ebebb94288c15ec5c62446eae3d3ed39c589871c5d0d7e35fd

Sharing

Copy URL

Twitter E-mail

General

Target

49e07a6a0c70f8ebebb94288c15ec5c62446eae3d3ed39c589871c5d0d7e35fd
Size

1.4MB
MD5

6af2733bf1770417ed51df8b9c7e5e71
SHA1

69dcbf4dfc83426c81696d3b8fa1c99135a19dbb
SHA256

49e07a6a0c70f8ebebb94288c15ec5c62446eae3d3ed39c589871c5d0d7e35fd
SHA512

53e9c011925d65cf2bf512961e3a1adfdd80f0430db9518f110a576344be6b5ad736ebc32fc8917172d1ae56e787bb239c64ccbcace8c473580c8870855f5ba1
SSDEEP

24576:pdlEj+KAGpYMnYjB3n/dqZYy2oROwPw7wqwgtnwxSwMs7hWH:pduBhVnyV6J/Y449RVOSH4M

Score

N/A

Malware Config

Signatures

Files

49e07a6a0c70f8ebebb94288c15ec5c62446eae3d3ed39c589871c5d0d7e35fd
.exe windows x86

ecb0d1d3e8b8d8b436bb49da0bb2a96b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

vtsdcr

vtsdcr_get_titleset_num
vtsdcr_set_titleset
?vtsdcr_get_chapter_num@@YAHH@Z
?vtsdcr_get_audio_name@@YAPADHH@Z
?vtsdcr_get_chapter_time@@YAHHHAAN0@Z
?vtsdcr_get_all_variable@@YAXPAPAXPAH@Z
_vtsdcr_dvd_open@12
?vtsdcr_get_audio_num@@YAHH@Z
?vtsdcr_get_pgc_time@@YANH@Z

kernel32

SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetEnvironmentStringsW
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
CreateDirectoryA
GetProfileStringA
GetLocaleInfoA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetVolumeInformationA
GetDriveTypeA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
CreateEventA
GetVersion
lstrcatA
MulDiv
lstrlenA
MultiByteToWideChar
lstrcpyA
FreeLibrary
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapSize
GetTimeZoneInformation
ExitThread
HeapReAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
SetCurrentDirectoryA
SetEnvironmentVariableA
TerminateProcess
ExitProcess
RtlUnwind
SetErrorMode
GetFileTime
GetFileAttributesA
GetCurrentDirectoryA
GetOEMCP
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalFlags
GetThreadLocale
GetFullPathNameA
LoadLibraryA
GetWindowsDirectoryA
GetLastError
Sleep
DeleteFileA
ReadFile
CloseHandle
CreateProcessA
CreatePipe
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProcessVersion
FindNextFileA
FindFirstFileA
FindClose
SuspendThread
ResumeThread
FormatMessageA
LocalFree
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FlushInstructionCache
VirtualProtect
WriteProcessMemory
VirtualQuery
GetSystemInfo
GetSystemTime
HeapFree
GetProcessHeap
HeapAlloc
GetTempPathA
GetTempFileNameA
SizeofResource
lstrcmpA
lstrcpynA
InterlockedDecrement
InterlockedIncrement
GetTickCount
GetCurrentThread
SetThreadPriority
GetCurrentThreadId
InterlockedExchange
GetACP
SetEvent
EnterCriticalSection
CreateThread
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WideCharToMultiByte
GetFileSize
GetCurrentProcessId
CreateFileA
lstrcmpiA
FindResourceA
LoadResource
LockResource
GetCPInfo
lstrlenW
WriteFile
SetLastError
DuplicateHandle
OpenProcess
WinExec
GetModuleHandleA
GetProcAddress
GetVersionExA
GetCurrentProcess
WaitForSingleObject

user32

GetDCEx
RegisterClipboardFormatA
SetParent
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
AdjustWindowRectEx
DeferWindowPos
GetTopWindow
WinHelpA
GetClassInfoA
RegisterClassA
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
GetMessageTime
GetLastActivePopup
GetForegroundWindow
RegisterWindowMessageA
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
DrawTextExA
CharUpperA
CharLowerA
GetWindowPlacement
DrawMenuBar
EqualRect
ValidateRect
HideCaret
GetWindowWord
SetFocus
EnumChildWindows
GetWindowLongW
SetWindowLongW
IsWindowUnicode
CallWindowProcW
CallWindowProcA
LoadStringA
IsWindowEnabled
CharUpperBuffA
ShowScrollBar
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
GetScrollInfo
EnableScrollBar
GetClassLongA
EnableMenuItem
InsertMenuItemA
LockWindowUpdate
IsWindowVisible
DestroyWindow
SetForegroundWindow
UnregisterClassA
RegisterClassExA
CopyAcceleratorTableA
SetMenu
GetWindowInfo
IsZoomed
MoveWindow
ShowWindow
GetWindowDC
GetWindowTextA
SetWindowRgn
SetWindowPos
RemovePropA
SetPropA
DefWindowProcA
GetMessageA
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowLongA
GetClassNameA
GetPropA
CallNextHookEx
PostThreadMessageA
wvsprintfA
MapWindowPoints
GetFocus
MessageBeep
SetWindowLongA
ClientToScreen
WindowFromPoint
GetActiveWindow
GetNextDlgTabItem
IsMenu
GrayStringA
TabbedTextOutA
GetMenuStringA
CreateMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
DrawTextA
ReleaseDC
GetMenuItemInfoA
PeekMessageA
TranslateMessage
DispatchMessageA
ExitWindowsEx
MessageBoxA
PostMessageA
CreatePopupMenu
InsertMenuA
IsClipboardFormatAvailable
GetKeyState
ScreenToClient
GetWindow
GetIconInfo
GetDesktopWindow
GetDC
CreateIconIndirect
DrawIconEx
LoadImageA
DrawStateA
DestroyIcon
SetCursor
GetNextDlgGroupItem
CharNextA
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
DestroyMenu
CopyIcon
DestroyCursor
IsChild
FillRect
SetRectEmpty
wsprintfA
LoadBitmapA
CopyRect
DrawFocusRect
FrameRect
RedrawWindow
InflateRect
ReleaseCapture
SetRect
GetMessagePos
DrawEdge
GetCapture
SetCapture
GetSysColor
GetSysColorBrush
DrawFrameControl
BeginPaint
EndPaint
IsRectEmpty
GetMenu
OffsetRect
PtInRect
GetParent
SystemParametersInfoA
IsWindow
InvalidateRect
UpdateWindow
LoadCursorA
LoadMenuA
GetSubMenu
GetCursorPos
GetWindowRect
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
SetTimer
KillTimer
EnableWindow
SendMessageA
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
CreateWindowExA
IntersectRect

gdi32

ExtCreateRegion
GetRegionData
GetDIBits
CreateICA
SelectPalette
StretchBlt
RestoreDC
SaveDC
CreateDIBitmap
SetDIBitsToDevice
SetStretchBltMode
ExtSelectClipRgn
GetClipBox
StretchDIBits
PtInRegion
ExcludeClipRect
GetClipRgn
IntersectClipRect
GetRgnBox
SetPolyFillMode
CreateFontIndirectA
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
GetTextExtentPointA
ScaleWindowExtEx
GetViewportExtEx
GetWindowExtEx
GetMapMode
SetRectRgn
DPtoLP
GetCharWidthA
CreateFontA
GetTextColor
LPtoDP
CreateRectRgnIndirect
OffsetRgn
CombineRgn
SetBkMode
GetBkColor
GetCurrentObject
Escape
TextOutA
RectVisible
PtVisible
CreateDIBSection
Ellipse
GetTextExtentPoint32W
GetBkMode
CreatePatternBrush
SetPixel
DeleteDC
MoveToEx
LineTo
CreateRectRgn
SelectClipRgn
DeleteObject
CreateSolidBrush
CreateBitmap
GetPixel
Polygon
GetStockObject
CreateDCA
GetTextMetricsA
ExtTextOutA
EnumFontFamiliesA
SetBrushOrgEx
UnrealizeObject
SetTextColor
SetBkColor
Rectangle
GetDeviceCaps
RealizePalette
CreatePen
GetTextExtentPoint32A
CreatePalette
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
PatBlt
SetWindowExtEx
GetObjectA
BitBlt

comdlg32

ChooseColorA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegQueryValueA
LookupPrivilegeValueA

shell32

ExtractIconExA
ShellExecuteExA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

ImageList_DragMove
ImageList_BeginDrag
ImageList_DrawEx
_TrackMouseEvent
ImageList_EndDrag
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Draw
ImageList_GetImageCount
ImageList_DragLeave
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_Create
ImageList_Destroy
ord17
ImageList_LoadImageA
ImageList_DrawIndirect
ImageList_GetIconSize

oledlg

ord8

ole32

OleIsCurrentClipboard
OleFlushClipboard
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
GetRunningObjectTable
CreateItemMoniker
CoCreateInstance
CoUninitialize
CoInitialize
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal

olepro32

ord253

oleaut32

SysAllocStringByteLen
VariantCopy
VariantTimeToSystemTime
SysStringLen
SysAllocStringLen
SysFreeString
SysAllocString
VariantChangeType
VariantClear

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 712KB - Virtual size: 711KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 612KB - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ecb0d1d3e8b8d8b436bb49da0bb2a96b

Headers

File Characteristics

Imports

winmm

vtsdcr

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

imagehlp

Sections

.text Size: 712KB - Virtual size: 711KB

.rdata Size: 120KB - Virtual size: 118KB

.data Size: 36KB - Virtual size: 148KB

.rsrc Size: 612KB - Virtual size: 608KB

.text
Size: 712KB - Virtual size: 711KB

.rdata
Size: 120KB - Virtual size: 118KB

.data
Size: 36KB - Virtual size: 148KB

.rsrc
Size: 612KB - Virtual size: 608KB