General

  • Target

    635f6b8cb80fdaf4a1e6599b7652e829

  • Size

    6.4MB

  • MD5

    635f6b8cb80fdaf4a1e6599b7652e829

  • SHA1

    ff16a84d698550396223d2e9b1c11f3f0db2a8a4

  • SHA256

    d6ab92045a1758152f0b7deba9ee3c204642f69edf70783ff498d28d50bfead1

  • SHA512

    7eb2bc9604acf0c71c3025c2a83c20b56beed1e8a2d77ed5c53155528cc78c19d1191fb280f51ce4935e1dcc98610297e5166be88e1edaf94b94c8b0edc0892b

  • SSDEEP

    196608:mdF0/XyZdvYuRq6B5ss60TNsrQ9qYvtPZpWY:CICZdvYuRHUmkudBZF

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 635f6b8cb80fdaf4a1e6599b7652e829
    .rar
  • bsplayer220.949_clip.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/BSplayer Pro/EQ.xml
    .xml
  • $APPDATA/BSplayer/bslib/BSPMLIB.DAT
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/banner.bmp
  • $PLUGINSDIR/dlg2.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/otheropt.ini
  • $PLUGINSDIR/plg.ini
  • BSplayer_WhenUSave_InstallerInst.exe
    .exe windows:4 windows x86 arch:x86

    72f5ce5dc0583916066aba0978c025d5


    Code Sign

    Headers

    Imports

    Sections

  • EQ.xml
    .xml
  • Media/Siddharta_-_Play_With_Me.mp3
  • Skins/BSplayer.v1.bsz
    .zip
  • abd.bmp
  • abn.bmp
  • abu.bmp
  • b1n.bmp
  • b1u.bmp
  • b2n.bmp
  • b2u.bmp
  • b3n.bmp
  • b3u.bmp
  • b4n.bmp
  • b4u.bmp
  • eq.ini
  • eqmain.bmp
  • exitd.bmp
  • exitn.bmp
  • exitu.bmp
  • fforn.BMP
  • frewn.BMP
  • fs2n.bmp
  • fs2u.bmp
  • fsmain.bmp
  • fsn.BMP
  • fsseek.bmp
  • fsu.bmp
  • main.bmp
  • minimize.bmp
  • minimized.bmp
  • minimizen.bmp
  • minimizeu.bmp
  • mutea.bmp
  • muten.bmp
  • muteu.bmp
  • nchapn.bmp
  • nchapu.bmp
  • nextd.bmp
  • nextn.bmp
  • nextu.bmp
  • opend.bmp
  • openn.bmp
  • openu.bmp
  • optn.bmp
  • optu.bmp
  • paused.bmp
  • pausen.bmp
  • pauseu.bmp
  • pchapn.bmp
  • pchapu.bmp
  • play1d.bmp
  • play1n.bmp
  • play1u.bmp
  • playd.bmp
  • playn.bmp
  • playu.bmp
  • prevd.bmp
  • prevn.bmp
  • prevu.bmp
  • rgn.dat
  • rgnfs.dat
  • seek.bmp
  • skin.ini
  • skinfs.ini
  • stopd.bmp
  • stopn.bmp
  • stopu.bmp
  • voldd.bmp
  • voldn.bmp
  • voldu.bmp
  • volud.bmp
  • volume.bmp
  • volun.bmp
  • voluu.bmp
  • Skins/Base/actaspbg.bmp
  • Skins/Base/actsubbg.bmp
  • Skins/Base/actsubpbg.bmp
  • Skins/Base/actvolbg.bmp
  • Skins/Base/b1n.bmp
  • Skins/Base/b1u.bmp
  • Skins/Base/b2n.bmp
  • Skins/Base/b2u.bmp
  • Skins/Base/b3a.bmp
  • Skins/Base/b3d.bmp
  • Skins/Base/b3n.bmp
  • Skins/Base/b3u.bmp
  • Skins/Base/b4a.bmp
  • Skins/Base/b4d.bmp
  • Skins/Base/b4n.bmp
  • Skins/Base/b4u.bmp
  • Skins/Base/b5a.bmp
  • Skins/Base/b5d.bmp
  • Skins/Base/b5n.bmp
  • Skins/Base/b5u.bmp
  • Skins/Base/b6n.bmp
  • Skins/Base/b7n.bmp
  • Skins/Base/b8.bmp
  • Skins/Base/b8n.bmp
  • Skins/Base/balbtnn.bmp
  • Skins/Base/btn_dn.bmp
  • Skins/Base/btn_ln.bmp
  • Skins/Base/btn_rn.bmp
  • Skins/Base/btn_un.bmp
  • Skins/Base/btncolorn.bmp
  • Skins/Base/btngrp1bg.bmp
  • Skins/Base/btnmenun.bmp
  • Skins/Base/btnmenuu.bmp
  • Skins/Base/eq.ini
  • Skins/Base/eqbtn1a.bmp
  • Skins/Base/eqbtn1n.bmp
  • Skins/Base/eqbtn2n.bmp
  • Skins/Base/eqbtn2u.bmp
  • Skins/Base/eqbtnn.bmp
  • Skins/Base/eqmain.bmp
  • Skins/Base/exabtn1n.bmp
  • Skins/Base/exabtn1u.bmp
  • Skins/Base/exabtn2n.bmp
  • Skins/Base/exabtn2u.bmp
  • Skins/Base/exabtn3n.bmp
  • Skins/Base/exabtn3u.bmp
  • Skins/Base/exabtn4n.bmp
  • Skins/Base/exabtn4u.bmp
  • Skins/Base/exaudioa.bmp
  • Skins/Base/exaudion.bmp
  • Skins/Base/exaudiou.bmp
  • Skins/Base/exdbtn1n.bmp
  • Skins/Base/exdbtn1u.bmp
  • Skins/Base/exdbtn2n.bmp
  • Skins/Base/exdbtn2u.bmp
  • Skins/Base/exdbtn3n.bmp
  • Skins/Base/exdbtn3u.bmp
  • Skins/Base/exdbtn4n.bmp
  • Skins/Base/exdbtn4u.bmp
  • Skins/Base/exdvda.bmp
  • Skins/Base/exdvdn.bmp
  • Skins/Base/exdvdu.bmp
  • Skins/Base/exitn.bmp
  • Skins/Base/exitu.bmp
  • Skins/Base/exradioa.bmp
  • Skins/Base/exradion.bmp
  • Skins/Base/exradiou.bmp
  • Skins/Base/extbg.bmp
  • Skins/Base/extva.bmp
  • Skins/Base/extvn.bmp
  • Skins/Base/extvu.bmp
  • Skins/Base/exvbtn1a.bmp
  • Skins/Base/exvbtn1n.bmp
  • Skins/Base/exvbtn2n.bmp
  • Skins/Base/exvbtn2u.bmp
  • Skins/Base/exvbtn3n.bmp
  • Skins/Base/exvbtn3u.bmp
  • Skins/Base/exvbtn4n.bmp
  • Skins/Base/exvbtn4u.bmp
  • Skins/Base/exvbtn5n.bmp
  • Skins/Base/exvbtn5u.bmp
  • Skins/Base/exvbtn6n.bmp
  • Skins/Base/exvbtn6u.bmp
  • Skins/Base/exvbtn7n.bmp
  • Skins/Base/exvbtn7u.bmp
  • Skins/Base/exvbtn8n.bmp
  • Skins/Base/exvbtn8u.bmp
  • Skins/Base/exvideoa.bmp
  • Skins/Base/exvideon.bmp
  • Skins/Base/exvideou.bmp
  • Skins/Base/fsactbg.bmp
  • Skins/Base/fsb1d.bmp
  • Skins/Base/fsb1n.bmp
  • Skins/Base/fsb1u.bmp
  • Skins/Base/fsb2d.bmp
  • Skins/Base/fsb2n.bmp
  • Skins/Base/fsb2u.bmp
  • Skins/Base/fsb3d.bmp
  • Skins/Base/fsb3n.bmp
  • Skins/Base/fsb3u.bmp
  • Skins/Base/fsb4d.bmp
  • Skins/Base/fsb4n.bmp
  • Skins/Base/fsb4u.bmp
  • Skins/Base/fsb5d.bmp
  • Skins/Base/fsb5n.bmp
  • Skins/Base/fsb5u.bmp
  • Skins/Base/fsmain.bmp
  • Skins/Base/fsn.BMP
  • Skins/Base/fsnextd.bmp
  • Skins/Base/fsnextn.bmp
  • Skins/Base/fsnextu.bmp
  • Skins/Base/fsopend.bmp
  • Skins/Base/fsopenn.bmp
  • Skins/Base/fsopenu.bmp
  • Skins/Base/fspaused.bmp
  • Skins/Base/fspausen.bmp
  • Skins/Base/fspauseu.bmp
  • Skins/Base/fsplayd.bmp
  • Skins/Base/fsplayn.bmp
  • Skins/Base/fsplayu.bmp
  • Skins/Base/fsprevd.bmp
  • Skins/Base/fsprevn.bmp
  • Skins/Base/fsprevu.bmp
  • Skins/Base/fsseek.bmp
  • Skins/Base/fsstopd.bmp
  • Skins/Base/fsstopn.bmp
  • Skins/Base/fsstopu.bmp
  • Skins/Base/fsu.bmp
  • Skins/Base/grp2.bmp
  • Skins/Base/main.bmp
  • Skins/Base/minimizen.bmp
  • Skins/Base/minimizeu.bmp
  • Skins/Base/mutea.bmp
  • Skins/Base/muted.bmp
  • Skins/Base/muten.bmp
  • Skins/Base/muteu.bmp
  • Skins/Base/nextd.bmp
  • Skins/Base/nextn.bmp
  • Skins/Base/nextu.bmp
  • Skins/Base/opend.bmp
  • Skins/Base/openn.bmp
  • Skins/Base/openu.bmp
  • Skins/Base/paused.bmp
  • Skins/Base/pausen.bmp
  • Skins/Base/pauseu.bmp
  • Skins/Base/playd.bmp
  • Skins/Base/playn.bmp
  • Skins/Base/playu.bmp
  • Skins/Base/plist.ini
  • Skins/Base/prevd.bmp
  • Skins/Base/prevn.bmp
  • Skins/Base/prevu.bmp
  • Skins/Base/rgn.dat
  • Skins/Base/rgnfs.dat
  • Skins/Base/seek.bmp
  • Skins/Base/skin.ini
  • Skins/Base/skinfs.ini
  • Skins/Base/stopd.bmp
  • Skins/Base/stopn.bmp
  • Skins/Base/stopu.bmp
  • Skins/Base/voldd.bmp
  • Skins/Base/voldn.bmp
  • Skins/Base/voldu.bmp
  • Skins/Base/volud.bmp
  • Skins/Base/volume.bmp
  • Skins/Base/volun.bmp
  • Skins/Base/voluu.bmp
  • Skins/Bat lite.bsz
    .zip
  • Btn1d.bmp
  • Btn1n.bmp
  • Btn1u.bmp
  • Btn2d.bmp
  • Btn2n.bmp
  • Btn2u.bmp
  • Btn3d.bmp
  • Btn3n.bmp
  • Btn3u.bmp
  • Btn4d.bmp
  • Btn4n.bmp
  • Btn4u.bmp
  • Btn5d.bmp
  • Btn5n.bmp
  • Btn5u.bmp
  • Btn6d.bmp
  • Btn6n.bmp
  • Btn6u.bmp
  • VolBtnd.bmp
  • VolBtnn.bmp
  • VolBtnu.bmp
  • bexitd.bmp
  • bexitn.bmp
  • bexitu.bmp
  • bnextd.bmp
  • bnextn.bmp
  • bnextu.bmp
  • bopend.bmp
  • bopenn.bmp
  • bopenu.bmp
  • bplayd.bmp
  • bplayn.bmp
  • bplayu.bmp
  • bprevd.bmp
  • bprevn.bmp
  • bprevu.bmp
  • bstopd.bmp
  • bstopn.bmp
  • bstopu.bmp
  • main.bmp
  • rgn.dat
  • seekb.bmp
  • skin.ini
  • Skins/MediaBOX V-2.bsz
    .zip
  • Bexitd.bmp
  • Bexitn.bmp
  • Bexitu.bmp
  • Btn10d.bmp
  • Btn10n.bmp
  • Btn10u.bmp
  • Btn11d.bmp
  • Btn11n.bmp
  • Btn11u.bmp
  • Btn12d.bmp
  • Btn12n.bmp
  • Btn12u.bmp
  • Btn1d.bmp
  • Btn1n.bmp
  • Btn1u.bmp
  • Btn2d.bmp
  • Btn2n.bmp
  • Btn2u.bmp
  • Btn3d.bmp
  • Btn3n.bmp
  • Btn3u.bmp
  • Btn4d.bmp
  • Btn4n.bmp
  • Btn4u.bmp
  • Btn5d.bmp
  • Btn5n.bmp
  • Btn5u.bmp
  • Btn6d.bmp
  • Btn6n.bmp
  • Btn6u.bmp
  • Btn7d.bmp
  • Btn7n.bmp
  • Btn7u.bmp
  • Btn8d.bmp
  • Btn8n.bmp
  • Btn8u.bmp
  • Btn9d.bmp
  • Btn9n.bmp
  • Btn9u.bmp
  • Readme.txt
  • VolBtnd.bmp
  • VolBtnn.bmp
  • VolBtnu.bmp
  • bnextd.bmp
  • bnextn.bmp
  • bnextu.bmp
  • bopend.bmp
  • bopenn.bmp
  • bopenu.bmp
  • bpaused.bmp
  • bpausen.bmp
  • bpauseu.bmp
  • bplayd.bmp
  • bplayn.bmp
  • bplayu.bmp
  • bprevd.bmp
  • bprevn.bmp
  • bprevu.bmp
  • bstopd.bmp
  • bstopn.bmp
  • bstopu.bmp
  • fsback.bmp
  • fsdesktd.bmp
  • fsdesktn.bmp
  • fsdesktu.bmp
  • fsfullsd.bmp
  • fsfullsn.bmp
  • fsfullsu.bmp
  • fslistd.bmp
  • fslistn.bmp
  • fslistu.bmp
  • fsnextd.bmp
  • fsnextn.bmp
  • fsnextu.bmp
  • fsplayd.bmp
  • fsplayn.bmp
  • fsplayu.bmp
  • fsprefd.bmp
  • fsprefn.bmp
  • fsprefu.bmp
  • fsratd.bmp
  • fsratn.bmp
  • fsratu.bmp
  • fsscand.bmp
  • fsscann.bmp
  • fsscanu.bmp
  • fssubsd.bmp
  • fssubsn.bmp
  • fssubsu.bmp
  • main.bmp
  • rgn.dat
  • rgnfs.dat
  • seekb.bmp
  • skin.ini
  • skinfs.ini
  • Skins/mediaBOX v-1.bsz
    .zip
  • Bexitd.bmp
  • Bexitn.bmp
  • Bexitu.bmp
  • Btn10d.bmp
  • Btn10n.bmp
  • Btn10u.bmp
  • Btn11d.bmp
  • Btn11n.bmp
  • Btn11u.bmp
  • Btn12d.bmp
  • Btn12n.bmp
  • Btn12u.bmp
  • Btn1d.bmp
  • Btn1n.bmp
  • Btn1u.bmp
  • Btn2d.bmp
  • Btn2n.bmp
  • Btn2u.bmp
  • Btn3d.bmp
  • Btn3n.bmp
  • Btn3u.bmp
  • Btn4d.bmp
  • Btn4n.bmp
  • Btn4u.bmp
  • Btn5d.bmp
  • Btn5n.bmp
  • Btn5u.bmp
  • Btn6d.bmp
  • Btn6n.bmp
  • Btn6u.bmp
  • Btn7d.bmp
  • Btn7n.bmp
  • Btn7u.bmp
  • Btn8d.bmp
  • Btn8n.bmp
  • Btn8u.bmp
  • Btn9d.bmp
  • Btn9n.bmp
  • Btn9u.bmp
  • Readme.txt
  • VolBtnd.bmp
  • VolBtnn.bmp
  • VolBtnu.bmp
  • bnextd.bmp
  • bnextn.bmp
  • bnextu.bmp
  • bopend.bmp
  • bopenn.bmp
  • bopenu.bmp
  • bpaused.bmp
  • bpausen.bmp
  • bpauseu.bmp
  • bplayd.bmp
  • bplayn.bmp
  • bplayu.bmp
  • bprevd.bmp
  • bprevn.bmp
  • bprevu.bmp
  • bstopd.bmp
  • bstopn.bmp
  • bstopu.bmp
  • fsVolBtnd.bmp
  • fsVolBtnn.bmp
  • fsVolBtnu.bmp
  • fsback.bmp
  • fsdesktd.bmp
  • fsdesktn.bmp
  • fsdesktu.bmp
  • fsfullsd.bmp
  • fsfullsn.bmp
  • fsfullsu.bmp
  • fslistd.bmp
  • fslistn.bmp
  • fslistu.bmp
  • fsnextd.bmp
  • fsnextn.bmp
  • fsnextu.bmp
  • fspaused.bmp
  • fspausen.bmp
  • fspauseu.bmp
  • fsplayd.bmp
  • fsplayn.bmp
  • fsplayu.bmp
  • fsprefd.bmp
  • fsprefn.bmp
  • fsprefu.bmp
  • fsprevd.bmp
  • fsprevn.bmp
  • fsprevu.bmp
  • fsratd.bmp
  • fsratn.bmp
  • fsratu.bmp
  • fsscand.bmp
  • fsscann.bmp
  • fsscanu.bmp
  • fssubsd.bmp
  • fssubsn.bmp
  • fssubsu.bmp
  • fstopd.bmp
  • fstopn.bmp
  • fstopu.bmp
  • main.bmp
  • rgn.dat
  • rgnfs.dat
  • seekb.bmp
  • skin.ini
  • skinfs.ini
  • bplay.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bslib/BSPMLIB.DAT
  • bslib/bslib.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • bslib/gds32.dll
    .dll windows:4 windows x86 arch:x86

    a090ec15de2c983bbdadb8cb582fabbb


    Headers

    Imports

    Exports

    Sections

  • bslib/icudt30.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bslib/icuin30.dll
    .dll windows:4 windows x86 arch:x86

    3e5bf6fe68b7a0b5213c54841b585d90


    Headers

    Imports

    Exports

    Sections

  • bslib/icuuc30.dll
    .dll windows:4 windows x86 arch:x86

    fe94280732393e7a30527f95d4d4c721


    Headers

    Imports

    Exports

    Sections

  • bslib/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • bslib/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • bspfilters.sam
  • bsplay.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bsplayer.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • bsplayer.exe.manifest
    .xml
  • bsrendv2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • changes.txt
  • doc/cmdline.txt
  • doc/ini_files.html
    .html
  • insfiles/BSPMLIB.DAT
  • insfiles/EQ.xml
    .xml
  • lang/Arabic.lng
  • lang/Arabic2.lng
  • lang/Belarussian.lng
  • lang/Bosanski.lng
  • lang/Brazilian_Portuguese.lng
  • lang/Brezhoneg.lng
  • lang/Bulgarian.lng
  • lang/Catal.lng
  • lang/Czech.lng
  • lang/Danish.lng
  • lang/Deutsch.lng
  • lang/Eesti.lng
  • lang/English.lng
  • lang/Esperanto.lng
  • lang/Euskara.lng
  • lang/Finnish.lng
  • lang/Franais.lng
  • lang/Galego.lng
  • lang/Greek.lng
  • lang/Hebrew.lng
  • lang/Hrvatski.lng
  • lang/Italiano.lng
  • lang/Latvian.lng
  • lang/Lithuanian.lng
  • lang/Magyar.lng
  • lang/Makedonski.lng
  • lang/Nederlands.lng
  • lang/Norsk.lng
  • lang/Polski.lng
  • lang/Portugues.lng
  • lang/Romanian.lng
  • lang/Russian.lng
  • lang/Serbian.lng
  • lang/Simplified_Chinese.lng
  • lang/Slovenski.lng
  • lang/Slovenina.lng
  • lang/Spanish.lng
  • lang/Swedish.lng
  • lang/Traditional_Chinese.lng
  • lang/Turkish.lng
  • lang/Ukrainian.lng
  • lang/Uzbek.lng
  • lang/Valenci.lng
  • lang/lang_changes.txt
  • plugins/oldskin.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • sdk/bsp.h
  • sdk/bsp.pas
  • sdk/plugins/C/Sample/sample_plugin.def
  • sdk/plugins/C/Sample/sample_plugin.dsp
  • sdk/plugins/C/Sample/sample_plugin.dsw
  • sdk/plugins/C/Sample/sampleplugin.c
  • sdk/plugins/C/sample_subtitles/sample_sub.c
  • sdk/plugins/C/sample_subtitles/sample_sub.def
  • sdk/plugins/C/sample_subtitles/sample_subtitles.dsp
  • sdk/plugins/C/sample_subtitles/sample_subtitles.dsw
  • sdk/plugins/Delphi/sample/sample_plugin.dpr
  • sdk/plugins/Delphi/sample_subtitles/sample_sub.dpr
  • sdk/plugins/bspplg.h
  • sdk/plugins/bspplg.pas
  • uninstall.EXE.nsis
  • 安装说明.url
    .url