4997b44eba96f208d739842bfab5ba42d6d403f5be934074f9fb5ebabbb735b2

Sharing

Copy URL Twitter E-mail

General

Target

4997b44eba96f208d739842bfab5ba42d6d403f5be934074f9fb5ebabbb735b2
Size

2.7MB
MD5

59e1fe6e03698ed318553bcb27459714
SHA1

926c6eb147771e33da7033b1bc1984d02fecbd19
SHA256

4997b44eba96f208d739842bfab5ba42d6d403f5be934074f9fb5ebabbb735b2
SHA512

a5ff4fc6baabfc751c8f6f1d48d7730acb702d003d399a8a2d3f24588f10a98ad5fd4d29fac44d8f9fb9e957c32a8746f8b6331e2778edefa89a989d99510937
SSDEEP

49152:4FRLGah4x9y9Ks2DOWyvAKM7QEBno8lP3NThjwTJ4ORdaHzHKA:4FRcyfAQEBo8lPi4ORd6t

Score

N/A

Malware Config

Signatures

Files

4997b44eba96f208d739842bfab5ba42d6d403f5be934074f9fb5ebabbb735b2
.exe windows x86

b31dcbce3e09b053f6e50324f1dbf53a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

istat

?getEncryptString@@YAXPBDHPADH@Z

jifeng

?getHookIPList@@YAHPAK0HPAH@Z

ires.ipa

?RegistTypes@CSupportType@@SAXPBD@Z
?GetExternNameFromMediaType@CSupportType@@SA_NHPADI@Z
?IsSupportType@CSupportType@@SAHPBD@Z
?isYouTubeURL@CSupportType@@SA_NPBD@Z
?IsUrlSupportType@CSupportType@@SAHPBD@Z

index

?SyncTrackerList@@YAHPBD@Z
?GetTrackerList@@YAHPAU_stTrackerList@@PBD@Z

comctl32

ImageList_GetIconSize
InitCommonControlsEx
_TrackMouseEvent
ImageList_LoadImageW
ImageList_DrawEx

ws2_32

inet_addr
ntohl
listen
accept
WSARecv
WSASetLastError
bind
__WSAFDIsSet
getservbyname
WSASend
WSAStringToAddressA
WSAStartup
WSACleanup
getsockopt
send
gethostbyname
closesocket
socket
recv
htons
WSAGetLastError
select
connect
ioctlsocket
getsockname
WSASocketW
htonl
WSCGetProviderPath
recvfrom
WSCWriteProviderOrder
WSCInstallProvider
WSCEnumProtocols
WSCDeinstallProvider
inet_ntoa
gethostname
ntohs
getpeername
WSAAddressToStringA
sendto
setsockopt

shlwapi

StrToIntW
StrRChrW
StrStrW

rpcrt4

UuidCreate

kernel32

GetDateFormatA
GetTimeFormatA
ExitProcess
HeapReAlloc
ExitThread
GetStartupInfoW
RtlUnwind
LCMapStringA
LCMapStringW
GetLastError
LocalFree
TlsFree
TlsAlloc
FormatMessageA
Sleep
lstrlenW
CompareStringW
lstrcmpiW
RaiseException
GetPrivateProfileStringW
InterlockedDecrement
WideCharToMultiByte
InterlockedIncrement
MultiByteToWideChar
GetModuleFileNameA
ReleaseMutex
GetModuleFileNameW
CreateMutexW
CreateFileMappingW
CopyFileW
GetPrivateProfileStringA
GetShortPathNameA
OpenFileMappingW
GetSystemDirectoryW
lstrcmpA
MapViewOfFile
UnmapViewOfFile
CloseHandle
CreateThread
GetCurrentProcessId
GetUserDefaultLangID
GetPrivateProfileIntW
MulDiv
WritePrivateProfileStringW
GetSystemDefaultLangID
FindClose
lstrcpyW
FindNextFileW
FindFirstFileW
DebugBreak
GetLocaleInfoW
GlobalHandle
FindResourceW
EnterCriticalSection
OutputDebugStringW
GetCurrentThreadId
GetDateFormatW
GlobalUnlock
lstrlenA
GlobalFree
LoadResource
GetModuleHandleW
lstrcatW
GetTimeFormatW
LeaveCriticalSection
GetTickCount
GetCPInfo
LockResource
GetCurrentProcess
GlobalAlloc
DeleteCriticalSection
GetDriveTypeW
lstrcmpW
SetLastError
GlobalLock
InitializeCriticalSection
SizeofResource
FreeLibrary
GetVersionExW
LoadLibraryExW
GetSystemTimeAsFileTime
WaitForSingleObject
InterlockedCompareExchange
InterlockedExchange
CreateIoCompletionPort
PostQueuedCompletionStatus
GetModuleHandleA
GetQueuedCompletionStatus
InterlockedExchangeAdd
TlsGetValue
GetProcAddress
TlsSetValue
LoadLibraryW
VerSetConditionMask
VerifyVersionInfoW
CreateFileW
lstrcpynW
FreeConsole
CreateDirectoryA
DeleteFileA
FindFirstFileA
RemoveDirectoryA
FindNextFileA
SetFileAttributesA
ReadFile
SetFilePointerEx
WriteFile
FormatMessageW
GetFileAttributesW
CreateDirectoryW
DuplicateHandle
CreateProcessW
CreatePipe
GetVolumeInformationA
DeviceIoControl
WritePrivateProfileStringA
LoadLibraryA
OutputDebugStringA
ExpandEnvironmentStringsA
GetSystemDirectoryA
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetProcessHeap
CompareStringA
GetStringTypeA
GetStringTypeW
VirtualFree
VirtualAlloc
GetConsoleCP
GetConsoleMode
SetStdHandle
SetEndOfFile
GetLocaleInfoA
GetVersionExA
CreateMutexA
CreateSemaphoreA
ReleaseSemaphore
GetFileAttributesA
CreateFileA
GetFileAttributesExA
MoveFileA
GetFileType
SetFilePointer
SetHandleCount
TerminateProcess
GetStdHandle
GetStartupInfoA
FlushFileBuffers
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetCommandLineW
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
IsProcessorFeaturePresent
GetThreadLocale
FlushInstructionCache

user32

CreateDialogIndirectParamW
GetAsyncKeyState
SetWindowContextHelpId
GetKeyState
GetActiveWindow
RegisterClassExW
CreateAcceleratorTableW
GetScrollPos
TrackPopupMenu
GetMenuStringW
DestroyCursor
SetWindowRgn
IsWindowVisible
DispatchMessageW
CreatePopupMenu
TranslateMessage
MessageBeep
GetMonitorInfoW
RemoveMenu
SetMenuDefaultItem
TrackPopupMenuEx
PostQuitMessage
GetMenuItemInfoW
LoadStringA
MonitorFromPoint
SetMenuItemInfoW
PeekMessageW
GetMessageW
LoadAcceleratorsW
CheckRadioButton
GetDlgItemInt
SetDlgItemInt
GetDlgItemTextA
CloseClipboard
GetMenu
AdjustWindowRectEx
OpenClipboard
EmptyClipboard
SetActiveWindow
SetClipboardData
IsDlgButtonChecked
RegisterWindowMessageA
MessageBoxW
ClientToScreen
PostMessageW
SendDlgItemMessageW
GetScrollInfo
LoadBitmapW
InflateRect
MapDialogRect
RedrawWindow
GetComboBoxInfo
CopyRect
DialogBoxParamW
DestroyAcceleratorTable
IsRectEmpty
UnregisterClassA
GetDesktopWindow
CreateDialogParamW
RegisterClipboardFormatW
SetScrollInfo
GetMenuState
CheckMenuRadioItem
DestroyMenu
AppendMenuW
GetMenuItemCount
GetSubMenu
ModifyMenuW
SetTimer
KillTimer
MessageBoxA
GetDlgItemTextW
EnableWindow
IsDialogMessageW
GetWindowTextLengthA
GetWindowTextA
ShowWindow
GetDlgItem
LoadStringW
DrawFocusRect
CallWindowProcW
EndDialog
GetCursorPos
GetDlgCtrlID
GetWindow
DefWindowProcW
SetCursor
GetFocus
ScreenToClient
GetWindowRect
SetFocus
SetDlgItemTextA
LoadImageW
GetWindowTextLengthW
SetDlgItemTextW
ReleaseCapture
TrackMouseEvent
RegisterWindowMessageW
GetMessagePos
FrameRect
DrawFrameControl
EqualRect
MoveWindow
IsIconic
DestroyWindow
BeginPaint
EndPaint
DrawTextW
GetSysColor
CreateWindowExW
PtInRect
GetSystemMetrics
SendMessageW
IsWindow
GetWindowLongW
SetWindowPos
GetWindowTextW
GetClassNameW
InvalidateRect
GetParent
ReleaseDC
SetRectEmpty
SetCapture
OffsetRect
GetDC
SetWindowLongW
SystemParametersInfoW
FillRect
LoadCursorW
MapWindowPoints
IsWindowEnabled
GetCapture
CharNextW
UpdateWindow
GetClientRect
LoadMenuW
TranslateAcceleratorW
IntersectRect
SetForegroundWindow
InvalidateRgn
GetClassInfoExW
IsChild
SetWindowTextW
SetScrollPos

gdi32

CreateRoundRectRgn
DPtoLP
ExtTextOutW
RestoreDC
GetTextExtentPoint32W
CreateCompatibleDC
OffsetWindowOrgEx
RoundRect
SetBkColor
SetTextColor
SetWindowOrgEx
GetClipBox
CreateSolidBrush
CreatePolygonRgn
SaveDC
MoveToEx
BitBlt
CombineRgn
CreateRectRgn
CreatePatternBrush
SetViewportOrgEx
CreateCompatibleBitmap
CreatePen
GetDeviceCaps
CreateICW
LineTo
DeleteObject
DeleteDC
SelectObject
GetObjectW
CreateFontIndirectW
SetBkMode
GetStockObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

SHGetSpecialFolderPathA
SHGetPathFromIDListW
ShellExecuteA
SHBrowseForFolderW
ShellExecuteW
Shell_NotifyIconW
SHGetSpecialFolderLocation

ole32

CoTaskMemAlloc
RegisterDragDrop
CoGetClassObject
CLSIDFromString
OleUninitialize
ReleaseStgMedium
CoCreateInstance
DoDragDrop
OleInitialize
StringFromGUID2
RevokeDragDrop
OleLockRunning
CLSIDFromProgID
CreateStreamOnHGlobal
CoTaskMemRealloc
CoInitialize
OleDuplicateData
CoGetMalloc
CoTaskMemFree
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantInit
OleCreateFontIndirect
DispCallFunc
LoadRegTypeLi
VariantClear
SysStringLen
LoadTypeLi
SysAllocStringLen
SysStringByteLen
VarUI4FromStr
VarBstrCat

mswsock

AcceptEx

msimg32

GradientFill
AlphaBlend

urlmon

URLDownloadToFileW
IsValidURL

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 966KB - Virtual size: 965KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b31dcbce3e09b053f6e50324f1dbf53a

Headers

File Characteristics

Imports

istat

jifeng

ires.ipa

index

comctl32

ws2_32

shlwapi

rpcrt4

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

mswsock

msimg32

urlmon

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 266KB - Virtual size: 266KB

.data Size: 33KB - Virtual size: 48KB

.rsrc Size: 966KB - Virtual size: 965KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 266KB - Virtual size: 266KB

.data
Size: 33KB - Virtual size: 48KB

.rsrc
Size: 966KB - Virtual size: 965KB