598c82ef5cdfc92f9f73b5a816f5fd0bbf68a7967c0a48a6a72f2e9b40699c3d

Sharing

Copy URL Twitter E-mail

General

Target

598c82ef5cdfc92f9f73b5a816f5fd0bbf68a7967c0a48a6a72f2e9b40699c3d
Size

13.8MB
MD5

113bc54b56b93c5e2476e68f41db8eb6
SHA1

4dfa000d67d4f873194fd8a4869c260f1cbfeb26
SHA256

598c82ef5cdfc92f9f73b5a816f5fd0bbf68a7967c0a48a6a72f2e9b40699c3d
SHA512

dcb9a787b31a3f6c2793e134daf696a751f7b21efd65c1923d8f672e4f5888f91bc31dc441965d4056df0997fb28d8971dca4435fc1cbb041a24fcc60df9870f
SSDEEP

196608:yuk2i/jBP8rqBYzTIJ3uJsv6tWKFdu9Cda7N:ySok+4TW+Jsv6tWKFdu9Ccx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
598c82ef5cdfc92f9f73b5a816f5fd0bbf68a7967c0a48a6a72f2e9b40699c3d

Files

598c82ef5cdfc92f9f73b5a816f5fd0bbf68a7967c0a48a6a72f2e9b40699c3d
.exe windows:6 windows x86

fb1deec47aeccaf5fb5ef7c4df8420d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_42

D3DX11CompileFromMemory

video_player_core

?_setMute@video_player_core@@QAEHH_N@Z
?_setVol@video_player_core@@QAEHHH@Z
?_get_seek_img@video_player_core@@QAEHH_J@Z
?_seekJump@video_player_core@@QAE_NH_J@Z
?_seek@video_player_core@@QAEHH_J@Z
?_stop@video_player_core@@QAEHH@Z
?_continue@video_player_core@@QAEHH@Z
?_pause@video_player_core@@QAEHH@Z
?_play@video_player_core@@QAEHXZ
?_setSrc@video_player_core@@QAEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?_setCallBack@video_player_core@@QAEHPAVvideo_interface@@@Z
?_init@video_player_core@@QAEHXZ
??1video_player_core@@UAE@XZ
??0video_player_core@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?_setStreamChannel@video_player_core@@QAEHHHH@Z
?_setDecodeType@video_player_core@@QAEHHH@Z
?_setSpeedType@video_player_core@@QAEHHH@Z
?_state@video_player_core@@QAEHH@Z
?_setCapture@video_player_core@@QAEHH_N@Z
?_setAudioChannel@video_player_core@@QAEHHW4audio_channel_type@@@Z

imm32

ImmReleaseContext
ImmGetVirtualKey
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmNotifyIME
ImmGetDefaultIMEWnd
ImmGetContext
ImmAssociateContext
ImmGetCompositionStringW

oleaut32

SystemTimeToVariantTime
VariantChangeType
VariantInit
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString

opengl32

glLoadIdentity
glLoadMatrixf
glMatrixMode
glOrtho
glBegin
glColor3f
glColor4f
glDrawArrays
glEnable
glEnd
glLineWidth
glPixelStorei
glTexImage2D
glTexParameteri
glVertex2f
glBindTexture

odbc32

ord31
ord43
ord44
ord18
ord154
ord138
ord176
ord165
ord152
ord30
ord13
ord20
ord75
ord61
ord72
ord127
ord108
ord111
ord136
ord119
ord139
ord140
ord145
ord147
ord24
ord26
ord9
ord29
ord12
ord141

uxtheme

ord47
GetThemeBackgroundRegion
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
CloseThemeData
OpenThemeData
GetThemeBool
GetThemeInt
GetThemeEnumValue
GetThemeMargins
GetThemeTransitionDuration
GetCurrentThemeName
IsAppThemed
IsThemeActive
SetWindowTheme
GetThemePropertyOrigin
GetThemeColor

shlwapi

PathFindFileNameW
PathFindExtensionW
PathAddBackslashW
PathRemoveFileSpecW
SHStrDupW

dwmapi

DwmSetWindowAttribute
DwmGetWindowAttribute
DwmIsCompositionEnabled
DwmEnableBlurBehindWindow
DwmExtendFrameIntoClientArea

winmm

PlaySoundW
timeSetEvent
timeKillEvent

ole32

CoUninitialize
CoInitialize
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleInitialize
OleUninitialize
CoInitializeEx
OleSetClipboard
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoCreateInstance
DoDragDrop
CoGetMalloc
CoTaskMemAlloc
CoCreateGuid
PropVariantClear
StringFromGUID2
CoTaskMemFree
ReleaseStgMedium

advapi32

CryptDestroyKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashA
CryptEnumProvidersA
AccessCheck
CopySid
DuplicateToken
MapGenericMask
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegQueryInfoKeyW
RegSetValueExW
AddAccessAllowedAce
AllocateAndInitializeSid
FreeSid
GetLengthSid
GetTokenInformation
CryptReleaseContext
CryptAcquireContextA
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegNotifyChangeKeyValue
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl

gdi32

CreateRoundRectRgn
CombineRgn
CreateRectRgn
DeleteObject
OffsetRgn
SelectClipRgn
GetDeviceCaps
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
DeleteDC
SelectObject
ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
SetPixelFormat
SwapBuffers
GetBitmapBits
GetObjectW
CreateFontIndirectW
EnumFontFamiliesExW
GetFontData
GetStockObject
AddFontResourceExW
RemoveFontResourceExW
AddFontMemResourceEx
RemoveFontMemResourceEx
GetTextMetricsW
GetTextFaceW
CreateDIBSection
GdiFlush
GetCharABCWidthsW
GetCharABCWidthsFloatW
GetGlyphOutlineW
GetOutlineTextMetricsW
GetTextExtentPoint32W
GetCharABCWidthsI
SetBkMode
SetGraphicsMode
SetTextColor
SetTextAlign
SetWorldTransform
ExtTextOutW
GetRegionData
CreateBitmap
GetDIBits
BitBlt

user32

GetKeyboardLayoutList
GetAncestor
DestroyIcon
DestroyCursor
GetWindowThreadProcessId
SetParent
GetParent
ScreenToClient
ClientToScreen
SetCursor
SetWindowTextW
InvalidateRect
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
SetForegroundWindow
GetForegroundWindow
EnableMenuItem
UnregisterClassW
GetSystemMetrics
SetCapture
GetCapture
SetFocus
IsIconic
IsWindowVisible
SetWindowPlacement
GetWindowPlacement
MoveWindow
FlashWindowEx
SetLayeredWindowAttributes
UpdateLayeredWindow
ShowWindow
DestroyWindow
IsChild
CreateWindowExW
AttachThreadInput
PostMessageW
UpdateLayeredWindowIndirect
SystemParametersInfoW
GetDesktopWindow
GetCaretBlinkTime
MessageBeep
IsWindow
GetDoubleClickTime
wsprintfW
ReleaseCapture
SendMessageW
SetWindowRgn
SetWindowLongW
GetWindowLongW
AdjustWindowRectEx
GetWindowRect
IsZoomed
SetWindowPos
DefWindowProcW
MessageBoxW
GetClassInfoW
RegisterClassExW
GetFocus
GetClientRect
GetCursorPos
ChildWindowFromPointEx
GetSysColorBrush
LoadImageW
MonitorFromWindow
GetMonitorInfoW
EnumDisplayMonitors
GetSysColor
LoadIconW
IsHungAppWindow
SetClipboardViewer
ChangeClipboardChain
CharNextExA
UnregisterDeviceNotification
RegisterDeviceNotificationW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
KillTimer
SetTimer
RegisterClipboardFormatW
GetKeyboardLayout
RegisterWindowMessageW
CreateCaret
DestroyCaret
HideCaret
SetCaretPos
PeekMessageW
GetKeyState
GetKeyboardState
ToAscii
ToUnicode
MapVirtualKeyW
GetMenu
TrackPopupMenuEx
SetMenuItemInfoW
NotifyWinEvent
MsgWaitForMultipleObjectsEx
GetQueueStatus
DispatchMessageW
TranslateMessage
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
SetCursorPos
GetCursor
LoadCursorW
CreateCursor
CreateIconIndirect
GetIconInfo
GetCursorInfo
RegisterClassW
GetClipboardFormatNameW
TrackMouseEvent
GetMessageExtraInfo
GetAsyncKeyState
GetWindowTextW
EnumWindows
RealGetWindowClassW
DrawIconEx
GetSystemMenu

ws2_32

send
recv
WSASocketW
shutdown
WSASetLastError
WSASendTo
inet_addr
WSARecvFrom
WSARecv
WSANtohs
WSANtohl
WSAIoctl
WSAHtonl
WSAConnect
WSAAccept
setsockopt
gethostbyname
WSASend
select
listen
htons
getsockname
getpeername
closesocket
gethostname
WSAStartup
WSACleanup
WSAAsyncSelect
bind
__WSAFDIsSet
getsockopt
WSAGetLastError
ntohl
gethostbyaddr
htonl

iphlpapi

ConvertInterfaceNameToLuidW
GetAdaptersInfo
GetAdaptersAddresses

crypt32

CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertOpenStore
CertCreateCertificateContext
CertFreeCertificateContext
CertGetCertificateChain
CertFreeCertificateChain
CertCloseStore

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

ReadConsoleInputA
GetExitCodeProcess
FindNextFileW
FindFirstFileExW
FindNextChangeNotification
FindFirstChangeNotificationW
FindCloseChangeNotification
GetUserGeoID
GetGeoInfoW
GetTimeZoneInformation
GetModuleHandleExW
MoveFileExW
SetFilePointerEx
GetStartupInfoW
GetFileInformationByHandleEx
FileTimeToSystemTime
MoveFileW
CopyFileW
DeviceIoControl
GetVolumePathNamesForVolumeNameW
RemoveDirectoryW
GetLogicalDrives
GetFileInformationByHandle
FindFirstFileW
SetConsoleMode
ReadConsoleW
GetConsoleCP
SetFileAttributesW
SetStdHandle
GetCPInfo
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateSemaphoreW
CreateTimerQueue
SignalObjectAndWait
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
GetConsoleMode
SetConsoleCtrlHandler
LoadLibraryExW
ExitThread
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
GetStringTypeW
UnregisterWait
IsValidLocale
EnumSystemLocalesW
IsValidCodePage
GetACP
GetOEMCP
GetVersionExW
VirtualProtect
GetThreadTimes
FreeLibraryAndExitThread
ReleaseSemaphore
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetCurrentDirectoryW
WriteFileEx
SleepEx
CancelIoEx
PeekNamedPipe
ReadFileEx
LCMapStringW
GetTickCount64
QueryPerformanceFrequency
GetUserPreferredUILanguages
GetCurrencyFormatW
GetTimeFormatW
GetDateFormatW
GetSystemDirectoryW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
TerminateThread
GetThreadPriority
SetThreadPriority
GetCurrentThread
DecodePointer
SwitchToThread
DuplicateHandle
GetCommandLineW
GetUserDefaultLCID
CompareStringW
SetLastError
FlushConsoleInputBuffer
GlobalMemoryStatus
GetModuleHandleA
GetFileType
GetStdHandle
SetHandleInformation
GlobalFree
CreateEventW
ResetEvent
SetEvent
GetOverlappedResult
CreateNamedPipeW
ConnectNamedPipe
WaitNamedPipeW
DisconnectNamedPipe
ExitProcess
GetConsoleWindow
LoadLibraryW
lstrcmpW
GetLongPathNameW
GetVolumeInformationW
GetDriveTypeW
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetFullPathNameW
GetFullPathNameA
HeapReAlloc
HeapCompact
SetEndOfFile
HeapAlloc
SystemTimeToFileTime
QueryPerformanceCounter
HeapFree
UnlockFile
FlushViewOfFile
LockFile
WaitForSingleObjectEx
OutputDebugStringW
GetTickCount
UnlockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
HeapDestroy
GetFileAttributesA
HeapCreate
HeapValidate
GetFileAttributesW
MultiByteToWideChar
FlushFileBuffers
GetTempPathW
HeapSize
LockFileEx
GetDiskFreeSpaceW
CreateFileMappingA
GetDiskFreeSpaceA
GetSystemInfo
GetFileAttributesExW
DeleteFileW
GetTempPathA
GetSystemTime
AreFileApisANSI
WideCharToMultiByte
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
lstrlenW
LocalAlloc
GetUserDefaultLangID
GlobalSize
GetLocaleInfoW
GlobalUnlock
GlobalLock
GlobalAlloc
OpenProcess
CheckRemoteDebuggerPresent
CreateProcessW
ExpandEnvironmentStringsW
SetErrorMode
FormatMessageW
LocalFree
GetModuleHandleW
GetModuleFileNameA
OutputDebugStringA
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateDirectoryA
WaitForMultipleObjects
OpenMutexW
CreateMutexW
WaitForSingleObject
ReleaseMutex
Sleep
lstrcatW
lstrcpyW
EncodePointer
VirtualFree
CreateThread
VirtualAlloc
WriteConsoleW
SystemTimeToTzSpecificLocalTime
GetLastError
GetModuleFileNameW
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
FileTimeToLocalFileTime
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcess
TerminateProcess
CreateDirectoryW
CreateFileW
CloseHandle
RaiseException
SetUnhandledExceptionFilter

shell32

ShellExecuteW
SHGetStockIconInfo
SHGetFileInfoW
SHOpenFolderAndSelectItems
ord190
ord155
SHCreateItemFromIDList
SHCreateItemFromParsingName
SHGetMalloc
SHGetPathFromIDListW
SHGetKnownFolderIDList
SHBrowseForFolderW
SHAddToRecentDocs
CommandLineToArgvW
SHGetKnownFolderPath
ord727

dxgi

CreateDXGIFactory

d3dx10_42

D3DXVec3TransformCoord
D3DXMatrixRotationYawPitchRoll
D3DXMatrixLookAtLH
D3DXMatrixPerspectiveFovLH
D3DXMatrixOrthoLH
D3DXMatrixTranspose

dbghelp

MiniDumpWriteDump

Sections

.text
Size: 9.6MB - Virtual size: 9.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb1deec47aeccaf5fb5ef7c4df8420d7

Headers

DLL Characteristics

File Characteristics

Imports

d3d11

d3dx11_42

video_player_core

imm32

oleaut32

opengl32

odbc32

uxtheme

shlwapi

dwmapi

winmm

ole32

advapi32

gdi32

user32

ws2_32

iphlpapi

crypt32

version

kernel32

shell32

dxgi

d3dx10_42

dbghelp

Sections

.text Size: 9.6MB - Virtual size: 9.6MB

.rdata Size: 3.7MB - Virtual size: 3.7MB

.data Size: 114KB - Virtual size: 193KB

.qtmetad Size: 3KB - Virtual size: 3KB

_RDATA Size: 1024B - Virtual size: 548B

.rsrc Size: 11KB - Virtual size: 11KB

.reloc Size: 336KB - Virtual size: 335KB

.text
Size: 9.6MB - Virtual size: 9.6MB

.rdata
Size: 3.7MB - Virtual size: 3.7MB

.data
Size: 114KB - Virtual size: 193KB

.qtmetad
Size: 3KB - Virtual size: 3KB

_RDATA
Size: 1024B - Virtual size: 548B

.rsrc
Size: 11KB - Virtual size: 11KB

.reloc
Size: 336KB - Virtual size: 335KB