2cff4edfda6ed5ec45d6665035415971

Sharing

Copy URL Twitter E-mail

General

Target

2cff4edfda6ed5ec45d6665035415971
Size

332KB
MD5

2cff4edfda6ed5ec45d6665035415971
SHA1

974823805237f24ce8433bd63562dd35a21d51c5
SHA256

fdb6537096006aa72a542bd7f0515395e716e619d7f25cac8f25b794fc07b6d0
SHA512

cef441c4eae4c1e3c4d3e56d04f61925138bfd0a8bb9271da4955712e9d9046e5053ba7cf33bc0ca1d8e10da1828d12554acfe7c0e90c4cd81715b9482245978
SSDEEP

6144:ygLUO9JbMLjeq8rRWXGXyI/X4AGCFa8O5N9cv2CtVWF5c:ygLUTLqrsXc+C88rFtV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cff4edfda6ed5ec45d6665035415971

Files

2cff4edfda6ed5ec45d6665035415971
.dll windows:4 windows x86 arch:x86

7c7bc39d9b35183b6950094dbdee9182

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvfw32

DrawDibClose
DrawDibDraw
DrawDibOpen

winmm

mciGetErrorStringA
mciSendCommandA
timeKillEvent
timeBeginPeriod
timeEndPeriod
timeSetEvent
timeGetTime

quartz

AMGetErrorTextA

u32comm

c32SetDLLErrInfo
u32GetAppIni
u32GetAppDataFolder
c32ShowMb
ufdSplitPathname

u32base

vcResample

uvsepa

ord1
ord2

sepa

?fnAuthQryBegin@@YAHPBDPAPAXH@Z
?fnAuthQryEnd@@YAXPAX@Z
?fnGetMPEGPrivateData@@YAHPAD00@Z
?fnSepaInit@@YAHKPAX0@Z
?fnFetchMPEGInfo@@YAHPBDPAUMPEGFILEINFO@@@Z
?fnSepaUnInit@@YAHXZ
?fnQryIFrame@@YAHPAXKHAAH@Z

mpeg_viorc

MpegViorcGetResInstance

kernel32

GetCurrentThread
GetThreadPriority
VirtualFree
VirtualAlloc
ReleaseSemaphore
CreateSemaphoreA
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GetCurrentProcessId
GetCurrentDirectoryA
GetModuleFileNameA
SetCurrentDirectoryA
GetSystemTime
GetPrivateProfileStringA
LoadLibraryA
FreeLibrary
CreateEventA
SetThreadPriority
lstrcatA
DeleteFileA
GetTempPathA
GetLastError
CopyFileA
lstrcpyA
Sleep
MultiByteToWideChar
CloseHandle
GetFileSize
CreateFileA
GetShortPathNameA
WriteFile
GetPrivateProfileIntA
OutputDebugStringA
lstrlenA
SetProcessAffinityMask
GetProcessAffinityMask
GetCurrentProcess
GetSystemInfo
GlobalLock
GlobalAlloc
GetProcAddress
GlobalReAlloc
GlobalUnlock
GlobalHandle
GetTickCount
GlobalFree
MulDiv
SetFilePointer
ReadFile
GetFileTime
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
SetEvent
ResetEvent
CreateThread
WaitForMultipleObjects
WideCharToMultiByte
GetACP

user32

SetFocus
GetDlgItemInt
SendDlgItemMessageA
WinHelpA
CheckDlgButton
IsWindowVisible
PostMessageA
GetParent
GetWindowTextA
IsWindowEnabled
DefWindowProcA
CallWindowProcA
CreateWindowExA
RegisterClassA
IsDlgButtonChecked
LoadCursorA
SetWindowPos
PostThreadMessageA
GetWindowLongA
PeekMessageA
MsgWaitForMultipleObjects
RegisterWindowMessageA
DispatchMessageA
SetDlgItemTextA
EnableWindow
DestroyWindow
GetActiveWindow
CreateDialogParamA
GetDlgItem
SetCursor
DialogBoxParamA
wsprintfA
LoadStringA
wvsprintfA
GetClientRect
ReleaseDC
BringWindowToTop
UpdateWindow
SetWindowLongA
EndDialog
GetQueueStatus
SendMessageA
SetDlgItemInt
ShowWindow
GetDC

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

ole32

CreateItemMoniker
CoUninitialize
CoFreeUnusedLibraries
CoTaskMemFree
CoInitialize
GetRunningObjectTable
CoCreateInstance
CoTaskMemAlloc

msvcrt

fwrite
strstr
_close
_write
_lseeki64
_open
_except_handler3
atoi
strncmp
_ftol
memmove
_purecall
floor
ceil
vsprintf
_splitpath
_initterm
_adjust_fdiv
fopen
fclose
malloc
free
_stricmp
sprintf
strrchr
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
_itoa

comdlg32

GetSaveFileNameA

Exports

Exports

VIODRIVER_CheckFrameSize
VIODRIVER_Display
VIODRIVER_DisplayBegin
VIODRIVER_DisplayEnd
VIODRIVER_DisplayFromFile
VIODRIVER_ExtractAudio
VIODRIVER_FreeOptions
VIODRIVER_GetCapability
VIODRIVER_GetDriverName
VIODRIVER_GetEncoderName
VIODRIVER_GetFileInfo
VIODRIVER_GetMiscData
VIODRIVER_GetOptions
VIODRIVER_GetOptionsUIPageTemplate
VIODRIVER_GetPreviewUIPageTemplate
VIODRIVER_GetPublicOptions
VIODRIVER_GetPublicOptionsEx
VIODRIVER_Init
VIODRIVER_Init2
VIODRIVER_OpenOption
VIODRIVER_PackOptions
VIODRIVER_Play
VIODRIVER_PlayBegin
VIODRIVER_PlayBeginEx
VIODRIVER_PlayEnd
VIODRIVER_PlayGetCurrentPos
VIODRIVER_PlayGetImage
VIODRIVER_PlayGetStatus
VIODRIVER_PlayGoto
VIODRIVER_PlayPause
VIODRIVER_PlaySetStatus
VIODRIVER_PlaySetWindowSize
VIODRIVER_PlayStop
VIODRIVER_PlayUpdate
VIODRIVER_Query
VIODRIVER_ReadAudio
VIODRIVER_ReadAudioBegin
VIODRIVER_ReadAudioEnd
VIODRIVER_ReadVideo
VIODRIVER_ReadVideoBegin
VIODRIVER_ReadVideoEnd
VIODRIVER_SetDvdDashVROption
VIODRIVER_SetOptions
VIODRIVER_SetPublicOptions
VIODRIVER_SetPublicOptionsEx
VIODRIVER_UnInit
VIODRIVER_UnpackOptions
VIODRIVER_Write

Sections

.text
Size: 176KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c7bc39d9b35183b6950094dbdee9182

Headers

File Characteristics

Imports

msvfw32

winmm

quartz

u32comm

u32base

uvsepa

sepa

mpeg_viorc

kernel32

user32

advapi32

ole32

msvcrt

comdlg32

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 172KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 20KB - Virtual size: 29KB

.rsrc Size: 100KB - Virtual size: 99KB

.reloc Size: 16KB - Virtual size: 13KB

.text
Size: 176KB - Virtual size: 172KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 20KB - Virtual size: 29KB

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 16KB - Virtual size: 13KB