player[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

player.exe
Size

3.0MB
MD5

335fc7a9fe0690a46ecd4964fd9a11ee
SHA1

1f8623696f51080a74ced55fbd48734bfa45b121
SHA256

7f7e2af5282d0d1bd7fa0308cc751a20f0ea089e6cac91b079822319f98ca50d
SHA512

80a00d3a6a8c2f64dee8c442a47061fa7abbf9def98521a6cceba54f8fc1dc860f2e99ed2710a3eb704926e01e96b35e549f15e1fd116e3ca8fa02774ef22851
SSDEEP

49152:qw3F8FEZ3xRkzQfeZx1hnZDn8Of5hEFJRqOdO8jfDV97P:D3FiEZrkzQ81hnRn9f5hEFJR3rP

Score

N/A

Malware Config

Signatures

Files

player.exe
.exe windows x86

12a0f38473c981b931cc0d88af89533d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFlags
FlushFileBuffers
GetModuleHandleA
CompareStringA
GetFileAttributesW
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
RtlUnwind
HeapReAlloc
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeFormatA
GetDateFormatA
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
IsProcessorFeaturePresent
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
LoadLibraryA
GetVersionExA
lstrcmpA
CompareStringW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalReAlloc
TlsGetValue
LocalFree
LocalAlloc
SuspendThread
VirtualAlloc
VirtualFree
InterlockedCompareExchange
SetThreadContext
GetThreadContext
ResumeThread
InterlockedExchange
SetUnhandledExceptionFilter
LoadLibraryExW
FreeLibrary
MapViewOfFile
CreateFileMappingW
GetVersionExW
UnmapViewOfFile
GetModuleHandleW
CreateFileA
GetCurrentThread
SetErrorMode
WriteProcessMemory
VirtualProtect
VirtualQuery
lstrcmpiA
lstrcmpiW
lstrcmpW
FlushInstructionCache
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
GlobalFree
GlobalHandle
LeaveCriticalSection
EnterCriticalSection
GlobalUnlock
GlobalLock
GlobalAlloc
ReadFile
SetFilePointer
GetTimeZoneInformation
WinExec
WriteFile
MulDiv
lstrlenA
SetLastError
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
TerminateProcess
Sleep
OpenProcess
OutputDebugStringW
CreateThread
TerminateThread
WaitForSingleObject
SetEvent
CreateEventW
CreateDirectoryW
RaiseException
ExitProcess
CloseHandle
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
GetProcAddress
LoadLibraryW
GetModuleFileNameW
GetLastError

user32

GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetSysColorBrush
SetWindowsHookExW
CallNextHookEx
IsIconic
GetKeyState
SystemParametersInfoA
UnregisterClassA
PostMessageW
SendMessageW
FindWindowExW
GetWindowThreadProcessId
MessageBoxW
EqualRect
GetDC
ReleaseDC
PostQuitMessage
GrayStringW
DrawTextExW
TabbedTextOutW
DestroyMenu
LoadIconW
WinHelpW
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
SetMenu
GetMenu
SetForegroundWindow
CopyRect
AdjustWindowRectEx
GetDlgCtrlID
DispatchMessageW
PeekMessageW
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
GetClassLongW
RegisterClassW
GetClassInfoW
RemovePropW
GetPropW
SetPropW
GetCapture
IsRectEmpty
PtInRect
DialogBoxIndirectParamW
KillTimer
GetActiveWindow
wsprintfW
RegisterWindowMessageW
IsChild
GetFocus
SetFocus
GetClassNameW
CharNextW
RedrawWindow
GetClassInfoExW
CreateWindowExW
CreateAcceleratorTableW
ClientToScreen
ScreenToClient
InvalidateRgn
GetDesktopWindow
DestroyAcceleratorTable
LoadCursorW
RegisterClassExW
CreateDialogIndirectParamW
DrawTextW
SetTimer
FillRect
SetLayeredWindowAttributes
CallWindowProcW
DefWindowProcW
SetCapture
ReleaseCapture
IsWindow
GetSysColor
DestroyWindow
SendDlgItemMessageW
MapDialogRect
EndDialog
EndPaint
BeginPaint
IsWindowVisible
GetWindowTextLengthW
GetWindowTextW
GetDlgItemTextW
ShowWindow
GetDlgItem
SetWindowTextW
SetDlgItemTextW
GetSystemMetrics
LoadImageW
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
MapWindowPoints
SetWindowPos
MoveWindow
SetWindowLongW
GetClientRect
InvalidateRect

advapi32

RegOpenKeyExW
RegSetValueExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyW
RegQueryValueExW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteValueW
RegCreateKeyW

ole32

CreateBindCtx
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CreateStreamOnHGlobal
OleLockRunning
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc

shell32

SHGetSpecialFolderPathW
ShellExecuteW

oleaut32

SysAllocStringLen
VariantTimeToSystemTime
VarUdateFromDate
SystemTimeToVariantTime
SysFreeString
SysStringLen
VariantChangeType
VarUI4FromStr
VariantClear
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VariantInit
SysAllocString

comctl32

InitCommonControlsEx

gdi32

CreateCompatibleBitmap
SelectObject
SetBkMode
DeleteObject
DeleteDC
GetObjectW
CreateFontIndirectW
CreateBrushIndirect
SetTextColor
GetTextExtentPoint32W
GetStockObject
CreateSolidBrush
SaveDC
RestoreDC
CreateBitmap
GetClipBox
SetBkColor
ExtTextOutW
SetMapMode
CreateCompatibleDC
PtVisible
RectVisible
TextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
BitBlt
GetDeviceCaps

urlmon

RegisterBindStatusCallback
CreateURLMonikerEx

dbghelp

ImageDirectoryEntryToData

psapi

GetModuleFileNameExW
EnumProcessModules
EnumProcesses
GetModuleFileNameExA
GetProcessImageFileNameW

wtsapi32

WTSQuerySessionInformationW

wininet

InternetCloseHandle
InternetReadFile
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW

gdiplus

GdipFree
GdipAlloc
GdipDisposeImage
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectRect
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdiplusStartup

rpcrt4

UuidFromStringA

ws2_32

connect
gethostbyname
WSACleanup
WSAStartup
socket
send
htons
recv
shutdown
closesocket

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

iphlpapi

GetAdaptersInfo

setupapi

SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

Sections

.text
Size: 446KB - Virtual size: 446KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 943KB - Virtual size: 943KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12a0f38473c981b931cc0d88af89533d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

oleaut32

comctl32

gdi32

urlmon

dbghelp

psapi

wtsapi32

wininet

gdiplus

rpcrt4

ws2_32

winspool.drv

iphlpapi

setupapi

Sections

.text Size: 446KB - Virtual size: 446KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 16KB - Virtual size: 32KB

.rsrc Size: 943KB - Virtual size: 943KB

.reloc Size: 47KB - Virtual size: 47KB

.text
Size: 446KB - Virtual size: 446KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 16KB - Virtual size: 32KB

.rsrc
Size: 943KB - Virtual size: 943KB

.reloc
Size: 47KB - Virtual size: 47KB