b157c42dc9784fb542b6d86cd27ef4885b837d2d600fc2a89e55c86f50b030ab

Sharing

Copy URL Twitter E-mail

General

Target

b157c42dc9784fb542b6d86cd27ef4885b837d2d600fc2a89e55c86f50b030ab
Size

628KB
MD5

084e27ca6dd75de1bb3e518a80ed49c4
SHA1

b493609d7385072c2e0d5b7f2abfd7922dc0a7da
SHA256

b157c42dc9784fb542b6d86cd27ef4885b837d2d600fc2a89e55c86f50b030ab
SHA512

599bdca83b5c9d7837ed583c6761da0265044a6ff2fcd23fd31f5db488ff2e4015111627f4f564bbc6c4adb80a1604192e9263082adbfcbdec8826d3d2d1b9e5
SSDEEP

6144:Nl3Krj7HUnpn/LiHvzk1NBEQ87iWQW15sNWt3u+IfvwDgYTI4zBwNKCfQhL:Nl3KbHUnpn/sSCmW15Iy3uVy/oWL

Score

N/A

Malware Config

Signatures

Files

b157c42dc9784fb542b6d86cd27ef4885b837d2d600fc2a89e55c86f50b030ab
.exe windows x86

1e6c8a7d28344f9265c10fa9e6e6f119

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kplayer

ord1

kernel32

ExitProcess
RaiseException
GetStartupInfoA
ExitThread
HeapReAlloc
GetACP
HeapSize
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
GetStdHandle
GetFileType
SetHandleCount
GetLocalTime
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GlobalHandle
GetTimeZoneInformation
GlobalFlags
CompareStringA
CompareStringW
GetSystemTime
RtlUnwind
SetErrorMode
CopyFileA
GetVolumeInformationA
GetFullPathNameA
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
DuplicateHandle
SetFilePointer
WriteFile
GetCurrentDirectoryA
GlobalSize
GetThreadLocale
GetCPInfo
lstrlenW
GetOEMCP
LocalReAlloc
GetProcessVersion
TlsGetValue
GetEnvironmentVariableA
TlsSetValue
InitializeCriticalSection
CreateEventA
GetPrivateProfileIntA
GetVersion
GetCommandLineA
GetDriveTypeA
ReleaseMutex
CloseHandle
CreateMutexA
GetLastError
Sleep
OpenProcess
TerminateProcess
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrcatA
lstrlenA
WinExec
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetProcAddress
lstrcpyA
GetModuleFileNameA
TlsFree
SizeofResource
TlsAlloc
LocalAlloc
GetProfileStringA
GetFileTime
GetProfileIntA
GetTickCount
SuspendThread
lstrcmpA
GetCurrentThread
MulDiv
FindNextFileA
FindFirstFileA
SetLastError
FindClose
FormatMessageA
LocalFree
FileTimeToLocalFileTime
FileTimeToSystemTime
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetCurrentProcess
GetVersionExA
FindResourceA
LoadResource
LockResource
GetProcessHeap
HeapAlloc
HeapFree
GetFileAttributesA
CreateFileA
GetFileSize
ReadFile
GlobalReAlloc
lstrcmpiA
lstrcpynA
ResetEvent
WaitForSingleObject
CreateThread
SetThreadPriority
ResumeThread
EnterCriticalSection
LeaveCriticalSection
SetEvent
DeleteCriticalSection
SetStdHandle
HeapDestroy
SetEnvironmentVariableA

user32

CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
GetSysColorBrush
CharUpperA
MoveWindow
SetWindowTextA
IsDialogMessageA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
UpdateWindow
SendDlgItemMessageA
PeekMessageA
SetFocus
AdjustWindowRectEx
GetTopWindow
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
SetWindowPos
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsWindowEnabled
MessageBoxA
ExitWindowsEx
IsChild
GetClassNameA
LoadCursorFromFileA
EnableMenuItem
SubtractRect
PostThreadMessageA
GetSysColor
FrameRect
DrawStateA
FillRect
GetMenuState
SetMenuItemInfoA
LoadStringA
wvsprintfA
GetForegroundWindow
SetActiveWindow
TranslateMessage
DispatchMessageA
SetRect
IntersectRect
LoadImageA
GetMenuItemInfoA
ModifyMenuA
InsertMenuA
LoadMenuIndirectA
LoadMenuA
DestroyMenu
CreatePopupMenu
CreateMenu
DestroyIcon
GetSubMenu
GetMenuStringA
GetMenuItemID
GetMenuItemCount
CallWindowProcA
mouse_event
GetCursorPos
CheckMenuItem
GetKeyState
IsWindowVisible
IsIconic
DrawIcon
GetSystemMenu
AppendMenuA
PostMessageA
LoadIconA
RegisterWindowMessageA
FindWindowA
SendMessageTimeoutA
ShowWindow
BringWindowToTop
GetWindowThreadProcessId
PtInRect
InflateRect
LoadCursorA
SetCursor
IsWindow
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatA
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GetNextDlgTabItem
GetWindowPlacement
GetMessageA
SetForegroundWindow
TranslateAcceleratorA
LoadAcceleratorsA
GetDlgItem
MapWindowPoints
GrayStringA
DrawTextA
TabbedTextOutA
SetTimer
KillTimer
CharNextA
GetDC
ReleaseDC
SetWindowRgn
GetWindowRgn
GetActiveWindow
GetParent
GetCapture
SetCapture
ClientToScreen
WindowFromPoint
RedrawWindow
ReleaseCapture
InvalidateRect
AdjustWindowRect
GetDesktopWindow
GetWindow
OffsetRect
LoadBitmapA
SystemParametersInfoA
CopyRect
GetWindowLongA
SetWindowLongA
GetWindowRect
wsprintfA
GetClientRect
GetSystemMetrics
SendMessageA
EnableWindow
ScreenToClient
GetFocus
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
UnregisterClassA

gdi32

DeleteDC
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SetTextColor
MoveToEx
LineTo
ExtSelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetMapMode
DPtoLP
GetBkColor
LPtoDP
CopyMetaFileA
CreateDIBitmap
CreateBitmap
GetClipBox
StretchDIBits
CreateDIBSection
CreatePen
GetPixel
CreateHatchBrush
PatBlt
CombineRgn
GetTextExtentPointA
FloodFill
CreateSolidBrush
GetCurrentPositionEx
GetDeviceCaps
GetTextColor
Rectangle
CreateFontA
CreateFontIndirectA
ExtTextOutA
TextOutA
Escape
PtVisible
CreateCompatibleBitmap
RectVisible
CreateRectRgn
BitBlt
GetTextExtentPoint32A
GetObjectA
CreateCompatibleDC
GetStockObject
SetStretchBltMode
StretchBlt
SelectObject
DeleteObject
ExtCreateRegion

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA
CommDlgExtendedError

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegCreateKeyExA

shell32

SHChangeNotify
Shell_NotifyIconA
DragQueryFileA
DragFinish
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
CLSIDFromProgID
CoTaskMemFree
CoLockObjectExternal
CLSIDFromString
CoCreateInstance
RegisterDragDrop
ReleaseStgMedium
OleGetClipboard
CoRegisterMessageFilter
CoGetClassObject
RevokeDragDrop
CoUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemAlloc
OleDuplicateData
CreateStreamOnHGlobal
OleInitialize
CoInitialize

olepro32

ord253
ord251

oleaut32

SysStringLen
VariantTimeToSystemTime
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
VariantClear
SysAllocStringLen
SysFreeString

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

winmm

mixerGetLineInfoA
mixerGetNumDevs
waveOutSetVolume
mixerSetControlDetails
mixerGetDevCapsA
mixerOpen
waveOutGetVolume
mixerGetControlDetailsA
mixerGetLineControlsA
mixerClose

Sections

.text
Size: 352KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.3rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1e6c8a7d28344f9265c10fa9e6e6f119

Headers

File Characteristics

Imports

kplayer

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

version

winmm

Sections

.text Size: 352KB - Virtual size: 348KB

.rdata Size: 76KB - Virtual size: 72KB

.data Size: 24KB - Virtual size: 42KB

.rsrc Size: 116KB - Virtual size: 115KB

.3rdata Size: 56KB - Virtual size: 56KB

.text
Size: 352KB - Virtual size: 348KB

.rdata
Size: 76KB - Virtual size: 72KB

.data
Size: 24KB - Virtual size: 42KB

.rsrc
Size: 116KB - Virtual size: 115KB

.3rdata
Size: 56KB - Virtual size: 56KB