6dc812f0f3e568d20d3d2c841f15b42d4ab1f0696db556e17aa3deabd6b04091

Sharing

Copy URL Twitter E-mail

General

Target

6dc812f0f3e568d20d3d2c841f15b42d4ab1f0696db556e17aa3deabd6b04091
Size

932KB
MD5

c1b01dcbda15bd86ac1c2344a3d3542f
SHA1

76359da46ff2fb77d3b336d7b55cf6f70af31e3d
SHA256

6dc812f0f3e568d20d3d2c841f15b42d4ab1f0696db556e17aa3deabd6b04091
SHA512

81f03a20c7fe953c9816b6c20c8d701aa3d426afb3fa8dc703f68c32ff3824836969ddc7362739604e1d228f6459b00bc9bf581f45959dae2a9660e7afe76290
SSDEEP

12288:bWz4uqagvietkbXV9M5tXobvjoN+y7yyH9y6LFdEvwsLk0+ptgNZ0eF:bWz7etoLM5tYbSzy6LDyD+ptgNZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6dc812f0f3e568d20d3d2c841f15b42d4ab1f0696db556e17aa3deabd6b04091

Files

6dc812f0f3e568d20d3d2c841f15b42d4ab1f0696db556e17aa3deabd6b04091
.dll windows x86

99248b6fc0d52d37a8cc8e0f7a54ef2f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeKillEvent
timeGetTime
timeSetEvent

kernel32

GetFileAttributesA
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCommandLineA
HeapReAlloc
RtlUnwind
RaiseException
VirtualAlloc
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
HeapCreate
HeapDestroy
VirtualFree
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
SetStdHandle
CreateFileW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
GetLocaleInfoA
CreateFileA
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
GetModuleHandleW
CompareStringA
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
lstrcmpA
GlobalGetAtomNameA
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
lstrlenA
GlobalLock
GlobalUnlock
GetCurrentProcessId
SetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
CreateThread
ResetEvent
CreateEventA
SetEvent
InterlockedDecrement
InterlockedIncrement
WaitForSingleObject
CloseHandle
CreateFileMappingA
GetLastError
InterlockedExchange
GetCurrentThreadId
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
MultiByteToWideChar
Sleep
GetTickCount
FreeLibrary
GetACP

user32

PostQuitMessage
DestroyMenu
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
DefWindowProcA
CallWindowProcA
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
LoadCursorA
GetSystemMetrics
GetSysColorBrush
CopyRect
GetWindowRect
GetClassNameA
PtInRect
GetFocus
SetWindowPos
SetWindowLongA
GetDlgCtrlID
IsWindow
SetWindowTextA
GetDlgItem
GetWindow
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
RegisterClassA
GetKeyState
PeekMessageA
ValidateRect
UnhookWindowsHookEx
GetWindowTextA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSysColor
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
GetClientRect
DrawTextA
PostMessageA

gdi32

DeleteDC
CreateBitmap
GetStockObject
OffsetViewportOrgEx
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetBkMode
DeleteObject
SelectObject
CreatePen
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
SetMapMode
SetBkColor
RestoreDC
SaveDC
MoveToEx
LineTo
SetTextColor
CreateFontA
SetViewportExtEx

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

oleaut32

VariantClear
VariantChangeType
VariantInit

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ws2_32

htons

oleacc

CreateStdAccessibleObject
LresultFromObject

Exports

Exports

TC_AddEZoom
TC_AttachFile
TC_CaptureBmpPic
TC_CaptureJpegPic
TC_CapturePic
TC_CapturePicData
TC_CapturePicture
TC_CapturePictureEx
TC_ChangeMonitor
TC_CleanStreamBuffer
TC_ClearPeopleCountInfo
TC_ClearPolyLocalVideo
TC_Combine
TC_CreateComposeRenderer
TC_CreateDuplicatePlayer
TC_CreateFishEyeCorrect
TC_CreatePlayer
TC_CreatePlayerForSpecialNeeds
TC_CreatePlayerFromFile
TC_CreatePlayerFromStream
TC_CreatePlayerFromStreamEx
TC_CreatePlayerFromVoD
TC_CreateQtWidget
TC_CreateSystem
TC_DeleteFishEyeCorrect
TC_DeletePlayer
TC_DeletePlayerEx
TC_DeleteSystem
TC_DestroyComposeRenderer
TC_DrawPolygonOnLocalVideo
TC_DrawRect
TC_DrawText
TC_DrawTextFlag
TC_EnablePlayStreamCtrl
TC_FastBackward
TC_FastForward
TC_FreeIFrameIndexInfo
TC_GetAVMode
TC_GetAudioVolumeEx
TC_GetBeginEnd
TC_GetBeginEndTimeStamp
TC_GetCurFrameNo
TC_GetFileInfo
TC_GetFileName
TC_GetFishEyeCorrectEnable
TC_GetFishEyeCorrectPara
TC_GetFrameCount
TC_GetFrameListCount
TC_GetFrameNoByFilePos
TC_GetFrameRate
TC_GetIFrameIndexInfo
TC_GetKeyFrameInfo
TC_GetMarkInfo
TC_GetMonitorCount
TC_GetMonitorInfo
TC_GetPlayTime
TC_GetPlayingFrameNum
TC_GetQtWidgetInfo
TC_GetStreamPlayBufferState
TC_GetUserDataInfo
TC_GetVEState
TC_GetVersion
TC_GetVerticalSync
TC_GetVideoDecryptKey
TC_GetVideoParam
TC_GoBegin
TC_GoEnd
TC_GoEndEx
TC_Locate
TC_PackStreamToRawStream
TC_Pause
TC_Play
TC_PlayAudio
TC_PlayerControl
TC_PutFrameToPlayer
TC_PutStreamToPlayer
TC_PutStreamToPlayerEx
TC_RawStreamToPackStream
TC_RecordAudio
TC_RefreshPlay
TC_RegisterCommonEventCallBack
TC_RegisterCommonEventCallBackEx
TC_RegisterCommonEventCallBack_V4
TC_RegisterDrawFun
TC_RegisterDrawFunEx
TC_RegisterEventMsg
TC_RegisterNotifyAudioCapture
TC_RegisterNotifyGetDecAV
TC_RegisterNotifyGetVoice
TC_RegisterNotifyPlayToEnd
TC_RegisterRawFrameCallback
TC_RegisterVECallBack
TC_RegisterVECallBackEx
TC_ReleaseQtWidget
TC_RemoveAudio
TC_RemoveEZoom
TC_RepairFile
TC_ResetEZoom
TC_ResetPlayWnd
TC_SearchVCAInfo
TC_Seek
TC_SeekEx
TC_SeekMark
TC_SegmentToFile
TC_SetAVMode
TC_SetAudioPlayParam
TC_SetAudioVolume
TC_SetAudioVolumeEx
TC_SetAudioVolumn
TC_SetCleanVoDBuffer
TC_SetComposeRendererPara
TC_SetDecCallBack
TC_SetEZoom
TC_SetFileHeader
TC_SetFishEyeCorrectCallBack
TC_SetFishEyeCorrectEnable
TC_SetFishEyeCorrectPara
TC_SetFishEyeCorrectWnd
TC_SetFrameListBufferSize
TC_SetModeRule
TC_SetPlayDelay
TC_SetPlayRect
TC_SetPlayRectEx
TC_SetPlayerAVMode
TC_SetRawCallback
TC_SetRawNotify
TC_SetSrcRect
TC_SetStreamBufferSize
TC_SetVerticalSync
TC_SetVideoDecryptKey
TC_SetVideoMode
TC_SetVoDPlayerOver
TC_SetVoDPlayerOverEx
TC_SlowForward
TC_StartAudioCapture
TC_StartCaptureFile
TC_StartFECTrack
TC_StartMonitorCPU
TC_StepBackward
TC_StepForward
TC_Stop
TC_StopAudio
TC_StopAudioCapture
TC_StopCaptureFile
TC_StopFECTrack
TC_StopMonitorCPU
TC_Swscale_YUV2RGB24
TC_Swscale_YUV2RGB565
TC_SycAddPlayer
TC_SycDelPlayer
TC_UpdateMonitor
TC_VEAbort
TC_VECleanup
TC_VODPlayerControl

Sections

.text
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99248b6fc0d52d37a8cc8e0f7a54ef2f

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

gdi32

winspool.drv

oleaut32

version

ws2_32

oleacc

Exports

Exports

Sections

.text Size: 644KB - Virtual size: 644KB

.rdata Size: 221KB - Virtual size: 221KB

.data Size: 20KB - Virtual size: 94KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 44KB - Virtual size: 43KB

.text
Size: 644KB - Virtual size: 644KB

.rdata
Size: 221KB - Virtual size: 221KB

.data
Size: 20KB - Virtual size: 94KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 44KB - Virtual size: 43KB