72a80c0dc865bc9a2f3dfae820e3bb6d46dc82141dd3e7d59458a30dc671c84c

Sharing

Copy URL Twitter E-mail

General

Target

72a80c0dc865bc9a2f3dfae820e3bb6d46dc82141dd3e7d59458a30dc671c84c
Size

6.3MB
MD5

9cca854b4806f4c426cef57e11ace762
SHA1

72ab1d3220ae8d44917d3d368d5e406ba9a9e0d9
SHA256

72a80c0dc865bc9a2f3dfae820e3bb6d46dc82141dd3e7d59458a30dc671c84c
SHA512

419c82bf3116ae86f9373e52ceca204669b8262c94a8b3496377537a9ee3d668860fc138fb55dfb2721c30c67faa112427a951288dfda1fb05c5468eeea01a25
SSDEEP

196608:bbDntPG57+gYlPMn930p5HOfIFxeTwfyLkQirV:PDnxG57SlPMn932/FwnLs

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/cx51kxqd_veryhuo.com/KX驱动/第一步注：中间出现对话框后请继续点击INTEL安装.exe	upx

NSIS installer 1 IoCs

installer

resource	yara_rule
static1/unpack001/cx51kxqd_veryhuo.com/KX驱动/第二步/ufxsetup.39.pre.exe	nsis_installer_1

Files

72a80c0dc865bc9a2f3dfae820e3bb6d46dc82141dd3e7d59458a30dc671c84c
.rar
cx51kxqd_veryhuo.com/KX驱动/MX6使用图说明.JPG
.jpg
cx51kxqd_veryhuo.com/KX驱动/MX8调音台图解.JPG
.jpg
cx51kxqd_veryhuo.com/KX驱动/烈火网下载说明.txt
cx51kxqd_veryhuo.com/KX驱动/烈火网下载频道.url
.url
cx51kxqd_veryhuo.com/KX驱动/第一步注：中间出现对话框后请继续点击INTEL安装.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 3.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cx51kxqd_veryhuo.com/KX驱动/第三步/ProFx308_38L.kxl
.dll windows x86

b5e9b684fde483390ba4cc9935c317e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetVersionExA
OutputDebugStringA
GetLastError

user32

SetActiveWindow
SetWindowTextA
GetMenuState
FindWindowA
EndDialog
GetDlgItemTextA
TrackMouseEvent
GetDesktopWindow
GetSystemMenu
DeleteMenu
PtInRect
CheckMenuItem
DestroyWindow
GetDC
ReleaseDC
FillRect
UpdateWindow
DialogBoxIndirectParamA
DialogBoxParamA
SetWindowPos
SendMessageA
ShowWindow
GetPropA
DefWindowProcA
AppendMenuA
CreatePopupMenu
ClientToScreen
SystemParametersInfoA
RemovePropA
SetPropA
SetWindowLongA
GetWindowRect
TrackPopupMenu
InflateRect
DrawTextA
MessageBoxA
LoadBitmapA
KillTimer
SetTimer
DestroyIcon
UnregisterClassA
RegisterClassExA
LoadCursorA
CreateWindowExA
InvalidateRect
GetClientRect
EndPaint
BeginPaint
SetCursor
CallWindowProcA
SetCapture
DestroyMenu
SetFocus
ReleaseCapture
PostMessageA
GetParent
GetWindowLongA
GetSysColor
GetMenuItemInfoA

gdi32

BitBlt
SelectObject
CreateCompatibleDC
SetTextColor
DeleteDC
CreateSolidBrush
SetBkColor
GetStockObject
GetDeviceCaps
CreateFontIndirectA
CreateCompatibleBitmap
GetPixel
GetObjectA
SetBkMode
DeleteObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

ExtractIconExA

advapi32

RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegFlushKey
RegCloseKey
RegOpenKeyExA

kxapi

?close@iKXPlugin@@UAEHXZ
?init@iKXPlugin@@UAEHXZ
?get_version@iKXPlugin@@UAEHXZ
??0iKXPlugin@@QAE@XZ
??1iKXPlugin@@UAE@XZ
??1iKXPluginGUI@@UAE@XZ
??_7iKXPluginGUI@@6B@
?enum_microcode@iKX@@QAEHHPAUmicrocode_t@@@Z
?set_microcode_bypass@iKX@@QAEHHH@Z
?disable_microcode@iKX@@QAEHH@Z
?enable_microcode@iKX@@QAEHH@Z
?populate_presets@iKXPlugin@@QAEHPAVkMenu@@@Z
?notify@iKXPlugin@@QAEHH@Z
?set_hw_parameter@iKX@@QAEHHI@Z
?ac97_write@iKX@@QAEHEG@Z
?apply_preset@iKXPlugin@@UAEHH@Z
?save_preset@iKXPlugin@@UAEHPAD@Z
?delete_preset@iKXPlugin@@UAEHPAD@Z
?get_current_preset@iKXPlugin@@UAEHPAD@Z
?export_presets@iKXPlugin@@UAEHPAD@Z
?import_presets@iKXPlugin@@UAEHPAD@Z
?event@iKXPlugin@@UAEHH@Z
?event_ex@iKXPlugin@@UAEHHPAX@Z
?get_all_params@iKXPlugin@@UAEHPAH@Z
?create_dsp_wnd@iKXPlugin@@UAEPAViKXDSPWindow@@PAVkDialog@@PAVkWindow@@PAVkFile@@@Z
?load_plugin_settings@iKXPlugin@@UAEHAAVkSettings@@@Z
?get_plugin_presets@iKXPlugin@@UAEPADXZ
?set_defaults@iKXPlugin@@UAEHXZ
?set_param@iKXPlugin@@UAEHHH@Z
?get_param@iKXPlugin@@UAEHHPAH@Z
?set_all_params@iKXPlugin@@UAEHPAH@Z
?describe_param@iKXPlugin@@UAEHHPAUkx_fxparam_descr_t@@@Z
?get_param_count@iKXPlugin@@UAEHXZ
?create_cp@iKXPlugin@@UAEPAViKXPluginGUI@@PAVkDialog@@PAVkFile@@@Z
?write_instruction@iKXPlugin@@QAEHHGGGGGI@Z
?get_hw_parameter@iKX@@QAEHHPAI@Z
?get_dsp_register@iKXPlugin@@QAEHGPAI@Z
?set_dsp_register@iKXPlugin@@QAEHGI@Z
?get_dword@iKX@@QAEHHPAI@Z
?save_plugin_settings@iKXPlugin@@UAEHAAVkSettings@@@Z

kxmixer.exe

?tweak_plugin@iKXPluginManager@@QAEHHPAVkDialog@@@Z

msvcrt

__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
strncpy
sprintf
exp
_ftol
pow
memset
strcmp
strlen
strcpy
log
_purecall
malloc
free
strcat
ceil
_vsnprintf
_except_handler3
?terminate@@YAXXZ
_initterm
_adjust_fdiv
memcpy

Exports

Exports

publish_plugins

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cx51kxqd_veryhuo.com/KX驱动/第二步/ufxsetup.39.pre.exe
.exe windows x86

18bc6fa81e19f21156316b1ae696ed6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
lstrcmpiA
ExitProcess
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
CopyFileA

user32

ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 280KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cx51kxqd_veryhuo.com/KX驱动/第四步.kx

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 3.7MB

UPX1 Size: 20KB - Virtual size: 20KB

.rsrc Size: 26KB - Virtual size: 28KB

b5e9b684fde483390ba4cc9935c317e8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

advapi32

kxapi

kxmixer.exe

msvcrt

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 32KB - Virtual size: 29KB

.rsrc Size: 52KB - Virtual size: 49KB

.reloc Size: 8KB - Virtual size: 6KB

18bc6fa81e19f21156316b1ae696ed6b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 299KB

.ndata Size: - Virtual size: 280KB

.rsrc Size: 27KB - Virtual size: 27KB

UPX0
Size: - Virtual size: 3.7MB

UPX1
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 26KB - Virtual size: 28KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 32KB - Virtual size: 29KB

.rsrc
Size: 52KB - Virtual size: 49KB

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 299KB

.ndata
Size: - Virtual size: 280KB

.rsrc
Size: 27KB - Virtual size: 27KB