b5e586d6b2d20696cc4160a6915ddbdf5b3588f8d263e99fe655a50dce935588

Sharing

Copy URL Twitter E-mail

General

Target

b5e586d6b2d20696cc4160a6915ddbdf5b3588f8d263e99fe655a50dce935588
Size

572KB
MD5

a38e6d9d6761d5a89ce1d02eb142cead
SHA1

fe2ad29931009c9266689bd6b8a8897bca38c534
SHA256

b5e586d6b2d20696cc4160a6915ddbdf5b3588f8d263e99fe655a50dce935588
SHA512

4919ac4bfb2d3182a03427f76f2e4b79420b8801041e8e7b79a55fd58c23a9cc6f29340cc123025da408de215c123f1ce935f17a0ebeabd0f6d5ae1734828f9f
SSDEEP

6144:+l3Krj7HUnpn/LiHvzk1NBEQ87iWQW15sNWt3u+IfvwDgYTI4zB:+l3KbHUnpn/sSCmW15Iy3uVy/

Score

N/A

Malware Config

Signatures

Files

b5e586d6b2d20696cc4160a6915ddbdf5b3588f8d263e99fe655a50dce935588
.exe windows x86

1e6c8a7d28344f9265c10fa9e6e6f119

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kplayer

ord1

kernel32

ExitProcess
RaiseException
GetStartupInfoA
ExitThread
HeapReAlloc
GetACP
HeapSize
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
GetStdHandle
GetFileType
SetHandleCount
GetLocalTime
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GlobalHandle
GetTimeZoneInformation
GlobalFlags
CompareStringA
CompareStringW
GetSystemTime
RtlUnwind
SetErrorMode
CopyFileA
GetVolumeInformationA
GetFullPathNameA
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
DuplicateHandle
SetFilePointer
WriteFile
GetCurrentDirectoryA
GlobalSize
GetThreadLocale
GetCPInfo
lstrlenW
GetOEMCP
LocalReAlloc
GetProcessVersion
TlsGetValue
GetEnvironmentVariableA
TlsSetValue
InitializeCriticalSection
CreateEventA
GetPrivateProfileIntA
GetVersion
GetCommandLineA
GetDriveTypeA
ReleaseMutex
CloseHandle
CreateMutexA
GetLastError
Sleep
OpenProcess
TerminateProcess
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrcatA
lstrlenA
WinExec
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetProcAddress
lstrcpyA
GetModuleFileNameA
TlsFree
SizeofResource
TlsAlloc
LocalAlloc
GetProfileStringA
GetFileTime
GetProfileIntA
GetTickCount
SuspendThread
lstrcmpA
GetCurrentThread
MulDiv
FindNextFileA
FindFirstFileA
SetLastError
FindClose
FormatMessageA
LocalFree
FileTimeToLocalFileTime
FileTimeToSystemTime
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetCurrentProcess
GetVersionExA
FindResourceA
LoadResource
LockResource
GetProcessHeap
HeapAlloc
HeapFree
GetFileAttributesA
CreateFileA
GetFileSize
ReadFile
GlobalReAlloc
lstrcmpiA
lstrcpynA
ResetEvent
WaitForSingleObject
CreateThread
SetThreadPriority
ResumeThread
EnterCriticalSection
LeaveCriticalSection
SetEvent
DeleteCriticalSection
SetStdHandle
HeapDestroy
SetEnvironmentVariableA

user32

CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
GetSysColorBrush
CharUpperA
MoveWindow
SetWindowTextA
IsDialogMessageA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
UpdateWindow
SendDlgItemMessageA
PeekMessageA
SetFocus
AdjustWindowRectEx
GetTopWindow
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
SetWindowPos
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsWindowEnabled
MessageBoxA
ExitWindowsEx
IsChild
GetClassNameA
LoadCursorFromFileA
EnableMenuItem
SubtractRect
PostThreadMessageA
GetSysColor
FrameRect
DrawStateA
FillRect
GetMenuState
SetMenuItemInfoA
LoadStringA
wvsprintfA
GetForegroundWindow
SetActiveWindow
TranslateMessage
DispatchMessageA
SetRect
IntersectRect
LoadImageA
GetMenuItemInfoA
ModifyMenuA
InsertMenuA
LoadMenuIndirectA
LoadMenuA
DestroyMenu
CreatePopupMenu
CreateMenu
DestroyIcon
GetSubMenu
GetMenuStringA
GetMenuItemID
GetMenuItemCount
CallWindowProcA
mouse_event
GetCursorPos
CheckMenuItem
GetKeyState
IsWindowVisible
IsIconic
DrawIcon
GetSystemMenu
AppendMenuA
PostMessageA
LoadIconA
RegisterWindowMessageA
FindWindowA
SendMessageTimeoutA
ShowWindow
BringWindowToTop
GetWindowThreadProcessId
PtInRect
InflateRect
LoadCursorA
SetCursor
IsWindow
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatA
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GetNextDlgTabItem
GetWindowPlacement
GetMessageA
SetForegroundWindow
TranslateAcceleratorA
LoadAcceleratorsA
GetDlgItem
MapWindowPoints
GrayStringA
DrawTextA
TabbedTextOutA
SetTimer
KillTimer
CharNextA
GetDC
ReleaseDC
SetWindowRgn
GetWindowRgn
GetActiveWindow
GetParent
GetCapture
SetCapture
ClientToScreen
WindowFromPoint
RedrawWindow
ReleaseCapture
InvalidateRect
AdjustWindowRect
GetDesktopWindow
GetWindow
OffsetRect
LoadBitmapA
SystemParametersInfoA
CopyRect
GetWindowLongA
SetWindowLongA
GetWindowRect
wsprintfA
GetClientRect
GetSystemMetrics
SendMessageA
EnableWindow
ScreenToClient
GetFocus
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
UnregisterClassA

gdi32

DeleteDC
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SetTextColor
MoveToEx
LineTo
ExtSelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetMapMode
DPtoLP
GetBkColor
LPtoDP
CopyMetaFileA
CreateDIBitmap
CreateBitmap
GetClipBox
StretchDIBits
CreateDIBSection
CreatePen
GetPixel
CreateHatchBrush
PatBlt
CombineRgn
GetTextExtentPointA
FloodFill
CreateSolidBrush
GetCurrentPositionEx
GetDeviceCaps
GetTextColor
Rectangle
CreateFontA
CreateFontIndirectA
ExtTextOutA
TextOutA
Escape
PtVisible
CreateCompatibleBitmap
RectVisible
CreateRectRgn
BitBlt
GetTextExtentPoint32A
GetObjectA
CreateCompatibleDC
GetStockObject
SetStretchBltMode
StretchBlt
SelectObject
DeleteObject
ExtCreateRegion

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA
CommDlgExtendedError

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegCreateKeyExA

shell32

SHChangeNotify
Shell_NotifyIconA
DragQueryFileA
DragFinish
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
CLSIDFromProgID
CoTaskMemFree
CoLockObjectExternal
CLSIDFromString
CoCreateInstance
RegisterDragDrop
ReleaseStgMedium
OleGetClipboard
CoRegisterMessageFilter
CoGetClassObject
RevokeDragDrop
CoUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemAlloc
OleDuplicateData
CreateStreamOnHGlobal
OleInitialize
CoInitialize

olepro32

ord253
ord251

oleaut32

SysStringLen
VariantTimeToSystemTime
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
VariantClear
SysAllocStringLen
SysFreeString

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

winmm

mixerGetLineInfoA
mixerGetNumDevs
waveOutSetVolume
mixerSetControlDetails
mixerGetDevCapsA
mixerOpen
waveOutGetVolume
mixerGetControlDetailsA
mixerGetLineControlsA
mixerClose

Sections

.text
Size: 352KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e6c8a7d28344f9265c10fa9e6e6f119

Headers

File Characteristics

Imports

kplayer

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

version

winmm

Sections

.text Size: 352KB - Virtual size: 348KB

.rdata Size: 76KB - Virtual size: 72KB

.data Size: 24KB - Virtual size: 42KB

.rsrc Size: 116KB - Virtual size: 115KB

.text
Size: 352KB - Virtual size: 348KB

.rdata
Size: 76KB - Virtual size: 72KB

.data
Size: 24KB - Virtual size: 42KB

.rsrc
Size: 116KB - Virtual size: 115KB